taskSavannah Administration - Tasks: task #5774, Submission of penalyze2 PE...

 
 

task #5774: Submission of penalyze2 PE executable analyzer

Submitter:  Stephan Peijnik <sp>
Submitted:  Thu 03 Aug 2006 12:26:11 PM UTC
   
 
Should Start On:  Wed 02 Aug 2006 10:00:00 PM UTC Should be Finished on:  Sat 12 Aug 2006 10:00:00 PM UTC
Category:  Project Approval Priority:  * 5 - Normal
Status:  Done Privacy:  Public
Assigned to:  tizzef Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Mon 14 Aug 2006 06:23:40 PM UTC, comment #1: 

Hi,

I have approved your project.  You will receive an automated e-mail containing detailed information about the approval.

Regards.

Patrick Camus <tizzef>
Thu 03 Aug 2006 12:26:11 PM UTC, original submission:  

A new project has been registered at Savannah
The project account will remain inactive until a site admin approve or discard the registration.


######### REGISTRATION ADMINISTRATION #########

While this item will be useful to track the registration process, approving or discarding the registration must be done using the specific "Group Administration" page, accessible only to site administrators, effectively logged as site administrators (superuser):

  <https://savannah.nongnu.org/siteadmin/groupedit.php?group_id=8704>


######### REGISTRATION DETAILS #########

Full Name:
----------
  penalyze2 PE executable analyzer

System Group Name:
-----------------
  penalyze2

Type:
-----
  non-GNU software & documentation

License:
--------
  GNU General Public License V2 or later

Description:
------------
  penalyze2 is a PE (win32) executable analyzer that uses emulation techniques for analyzation. The goal of this software package is to provide a free (as in freedom) utility that helps malware researchers doing their daily work. Even though it includes disassembing the x86 bytecode it is not a conventional disassembler as it emulates everything whilst disassembling. This makes sure runtime packers can be easily circumvented. Apart from using a public domain x86 decoder library it implements instruction handlers which emulate an x86 processor and of course also emulates as many common library calls as possible. However, it is not only intended to be an implementation but more a way to get to   some knowledge freely (as in free beer). It is planned to also include documentation on pretty much anything it does.
The main parts of the package are: a x86 virtual machine/emulator, the x86 bytecode decoder library and a PE executable file loader. Additionally a debugger-like CLI interface is planned to enable users to do debugging on executables.
It has been tested on GNU/Linux on x86 only right now but has been designed to be platform independant. Releases including support for other free and non-free operating systems as host are planned aswell.
The current development sources are available via trac/svn from https://trac.sp.or.at/trac/penalyze2. However, the current hosting is quite limited in bandwidth and performance.
As a last note, the x86 decoder library being used is libdasm available from http://nologin.org/. As public domain software it is however included in the software package directly and linked against statically.


Stephan Peijnik <sp>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Follow 5 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-08-14 tizzef StatusIn Progress Done
    Percent Complete0% 100%
    Open/ClosedOpen Closed
2006-08-07 tizzef StatusNone In Progress
    Assigned toNone tizzef

Back to the top

Powered by Savane 3.13-4b48.
Corresponding source code