Want to Join Us ?

you'll be able to discuss, share and send private messages.

Python IDAPython script in order to auto-rename subs by 0x00ach

Discussion in 'Scripts' started by storm shadow, Feb 14, 2017.

Share This Page

  1. storm shadow

    Techbliss Owner Admin Ida Pro Expert Developer


    IDAPython script in order to auto-rename sub.
    The script uses the @Heurs MACHOC algorithm (https://github.com/ANSSI-FR/polichombr) in order to build tiny CFG hashes of a source binary sample in IDA PRO. These hashes may be compared against the ones in the destination binary sample. If a 1-1 relationship is found, the sub is renamed.
    • code cleaning;
    • N grams (3 and 5);
    • use a %temp% or /tmp file to share the hashes;
    • other methods.

    Attached Files:

    roocoon, Rip Cord and computerline like this.