I decided to continue my professional blog after a few years. The blog reflects now my current interests: CSharp programming, malware analysis and deobfuscation techniques. This blog was originally about Visual Basic.NET programming tips and sample source code.
Thursday, April 5, 2018
RETouch 1.0 released
RETouch is a windows application for deobfuscating and analyzing malicious scripts. Malicious scripts are commonly the first step of malware infection. Since script files are text-based, RETouch has functionality to handle texts and strings. For binary analyses there are plenty of excellent applications available.
RETouch aims to be
• extendible with scripting
• "umbrella" for external applications
Because malware and malicious scripts evolve quickly, the core functionality is just not enough. That is why RETouch provides easy scripting to extend its core functions.
Like any software with version number 1.0 this is far from perfect. I have started to program the next version with some features I left from version 1.0.
Labels:
deobfuscation,
malware,
RETouch,
script
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment