admin/Bw3ll-sharem
1
0
Fork 0
mirror of https://github.com/Bw3ll/sharem synced 2026-06-06 15:24:28 +00:00
Code Issues Packages Projects Releases Wiki Activity
Page: Home
Pages
1. Installation and Steps to quickly analyze a sample 2. Quick Start Analysis 3. Emulation 4. SHAREM’s Disassembler 5. Detecting Shellcode Instructions 6. Hashes and Other Basic Information 7. Displaying and Reporting Results 8. Modules and Imports in PE Files 9. Brute Force Deobfuscation of Encoded Shellcode Complete Code Coverage Distributed Computing with Brute Force Deobfuscation Home
Clone
16
Home
Bw3ll edited this page 2022-10-21 15:06:42 -05:00

SHAREM is a shellcode analysis or malware analysis tool that utilizes emulation and static analysis techniques to provide useful information about a sample.

Arguably emulation is static analysis, so we can obtain a tremendous wealth of information without ever executing the shellcode, emulating over 12,000 WinAPIs and 98% of user-mode Windows syscalls, and generating highly detailed reports (text file and JSON).

It can be used to analyze raw samples of shellcode and additionally PE files.