"Windows Portable Executable" slides > update.
#dfir #infosecurity #malware
https://www.winitor.com/pdf/Windows-Portable-Executable.pdf

#pestudio 9.58 now available with following changes:
. Fix an issue when fetching the Virustotal report
. Fix a bug when detecting libraries
. Extend indicators
#Malware #Ransomware #infosecurity #dfir

#pestudio 9.56 now available http://www.winitor.com with following changes:
. Toggle DLL <> EXE (file-header)
. Assign new entry-point
. Extend certificate detection
. Dump sections...
#malware #dfir #infosec

#pestudio to start #malware initial assessment.
#MITRE #infosec #Ransomware

#pestudio 9.55 now available http://winitor.com with following changes:
. Add groups collection
. Reduce CPU consumption
. Fix bugs
#Malware #Ransomware #DFIR #infosec

#pestudio analyses an Executable and provides an overview of the @mitreattack techniques detected. #Malware Medusa #Ransomware

When handling .NET Executable file, #pestudio enumerates references to managed & unmanaged libraries. #malware #dfir #infosec

Update of #pestudio in a few days, to ease #Malware Initial Assessment. #Ransomware #infosecurity

Update of #pestudio soon, to add Libraries groups in order to accelerate #Malware Initial Assessment.
#Ransomware #infosec #dfir

Some #malware puts the majority of its functionality into Delay-loaded libraries (functions).
#Ransomware #infosec #DFIR