PE-bear Portable Executable reversing tool with a friendly GUI |
PE-sieve Scans a process and search for malicious implants |
HollowsHunter Scans a system and search for malicious implants |
MalUnpack Dynamic malware unpacker based on PE-sieve |
IFL (Interactive Functions List) an IDA plugin providing an alternative view on functions, easy to navigate and browse |
Tiny Tracer (PIN tool) A PIN tool helpful in resolving obfuscated API calls, and finding OEP of packed applications |