A dynamic malware unpacker based on Intel Pin and PE-sieve (deploys PE-sieve scan on specific triggers). Caution: during the process the malware will be deployed. Use it on a VM only.
To compile the prepared project you need to use Visual Studio >= 2012. It was tested with Intel Pin 3.28.
Using PE-sieve v0.3.8
- Clone this repo into
\source\tools
that is inside your Pin root directory. - Open the project in Visual Studio.
- The other installation steps are analogous to the ones explained in this Wiki.