This tool provides an in-depth analysis of files to help identify potential malware. It calculates entropy, detects file types, and searches for potentially malicious patterns. The tool supports multiple file formats, including Portable Executable (PE), Executable and Linkable Format (ELF), Java Archive (JAR), scripts, and Office documents.
- File Type Detection: Automatically detects the type of file being analyzed.
- Entropy Calculation: Computes the entropy of files to assess their randomness and potential for obfuscation.
- Heuristic Analysis: Checks script files for suspicious keywords and patterns that may indicate malicious behavior.
- SHA-256 Hash Calculation: Generates the SHA-256 hash of the file for further analysis or comparison with known malware hashes.
- File Size Reporting: Provides the size of the file in bytes for context during analysis.
-
Ensure you have Go installed on your system.
-
Clone the repository:
git clone https://github.com/b17w1z4rd/malware-analysis-tool.git cd malware-analysis-tool
-
Build the tool : go build
-
Run the tool with the following command: go run malware_analysis_tool.go <path_to_file>