PPEE (puppy)
PE-bear
pestudio
Malcat
IDA
PE Tools
EXE Explorer
PE Explorer
Cuckoo Sandbox
Sandboxie
Any.Run
VirusTotal
Joe Sandbox
Shadow Defender
Metadefender
URLscan.io
PPEE (puppy)No PPEE (puppy) videos yet. You could help us improve this page by suggesting one.
Based on our record, Cuckoo Sandbox seems to be more popular. It has been mentiond 18 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
You can detonate it into a VM running an instance of Cuckoo Sandbox. If you want to go the extra mile, you can dump the memory of said VM and analyse it with Volatility Framework. Also, if you want to quickly identify behavioural patterns in executable code, you can use Mandiant's CAPA tool (though idk if it works on .pdfs). Source: 12 months ago
You should save a copy of the .exe, copy it into a VM running Cuckoo and get a report on exactly what the .exe does. Without this automated dissection, people are making educated guesses. They're probably right, but why not be certain? There is an online version too - https://cuckoosandbox.org. Source: about 1 year ago
You could use a service like cuckoo to check links/files. Source: over 1 year ago
I made my own lab in college using a series of VM's, A windows 10 machine that was packed with analysis tools, a kali listening machine (running inetsim or fakenet, I can't remember.) and I had remnux on another machine (which I ended up not really making use of, but it was there.) I used virtualbox and ran these VM's in an internal network, no internet access. Disabled all clipboard and file sharing after... Source: over 1 year ago
Another option if you want to self-host is https://cuckoosandbox.org/ . Of note, it's currently an unmaintained project so issues may not receive support, but it is free. Source: over 1 year ago
PE-bear - PE-bear is a reversing tool for PE files.
Sandboxie - Sandboxie is a program for Windows that is designed to allow the user to isolate individual programs on the hard drive.
pestudio - pestudio is a tool allowing to statically analyze malicious files.
Any.Run - Interactive malware hunting service. Any environments ready for live testing most type of threats.
Malcat - Malcat is a feature-rich hexadecimal editor / disassembler for Windows and Linux for malware analysts, incident responders, CTF players and SOC operators.
VirusTotal - VirusTotal is a free service that analyzes suspicious files and URLs and facilitates the quick...
