Cuckoo Sandbox
Any.Run
Sandboxie
VirusTotal
Joe Sandbox
URLscan.io
Metadefender
Shadow Defender
IDA
Ghidra
OllyDbg
X64dbg
WinHex
Hiew
Binary Ninja
Hex Workshop
A powerful disassembler and a versatile debugger IDA Pro as a disassembler is capable of creating maps of their execution to show the binary instructions that are actually executed by the processor in a symbolic representation (assembly language). Advanced techniques have been implemented into IDA Pro so that it can generate assembly language source code from machine-executable code and make this complex code more human-readable.
The debugging feature augmented IDA with the dynamic analysis. It supports multiple debugging targets and can handle remote applications. Its cross-platform debugging capability enables instant debugging, easy connection to both local and remote processes and support for 64-bit systems and new connection possibilities.
Cuckoo Sandbox IDABased on our record, Cuckoo Sandbox should be more popular than IDA. It has been mentiond 18 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: about 1 year ago
You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago
You could use a service like cuckoo to check links/files. Source: over 1 year ago
I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago
Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago
The tool used in those white screenshots is called IDA pro, a decompiler. https://hex-rays.com/ida-pro/. - Source: Hacker News / 3 months ago
Learn assembly and then fuck around with https://hex-rays.com/ida-pro/. Gonna take you a week max. Source: 7 months ago
To RE the executable IDA Pro can be very useful: Https://hex-rays.com/ida-pro/. Source: over 1 year ago
It’s a good disassembler that is fairly expensive. https://hex-rays.com/ida-pro/. - Source: Hacker News / over 1 year ago
It's a disassembler, widely used for creating, for example, cracks/executable patches for games. https://hex-rays.com/ida-pro/. - Source: Hacker News / over 1 year ago
Any.Run - Interactive malware hunting service. Any environments ready for live testing most type of threats.
Ghidra - Software Reverse Engineering (SRE) Framework
Sandboxie - Sandboxie is a program for Windows that is designed to allow the user to isolate individual programs on the hard drive.
OllyDbg - OllyDbg is a 32-bit assembler level analysing debugger.
VirusTotal - VirusTotal is a free service that analyzes suspicious files and URLs and facilitates the quick...
X64dbg - X64dbg is a debugging software that can debug x64 and x32 applications.