During my research I often find myself needing to take the output JSON from malpdfobj and get some information from it. I coded up quick scripts here and there, but quickly saw that I was typing the same thing over and over. Rather then having to ...
Read more →I updated my last post with the response I got from VirusTotal. The short answer was that I needed to basically roll my own translation from the old format to my proposed format. Being that I want to make use of the results, I decided to modify ma...
Read more →Update: VirusTotal reached out on Twitter with the following: @9bplus hi there. your proposal looks reasonable to me, but we can't implement that changes in the short term. maybe in a 2.0 release @jcanto > awesome. Do you guys have a time of when ...
Read more →I can't say enough good about Didier Stevens and his PDF tools he has created. He has provided a lot of functionality in the couple tools he released and they're great for getting the data I want. As I stated in my last post, I need JSON and prefe...
Read more →I want to store as much data as possible about this malware being collected, and I realized that a database would be the best idea in storing the data. One of the things I was playing around with in my head was taking these detailed PDFiD scans an...
Read more →