https://github.com/fr0gger/superpehasher
SuperPeHasher is a wrapper for several hash algorithms dedicated to PE file.
https://github.com/fr0gger/superpehasher
Last synced: 15 days ago
JSON representation
SuperPeHasher is a wrapper for several hash algorithms dedicated to PE file.
- Host: GitHub
- URL: https://github.com/fr0gger/superpehasher
- Owner: fr0gger
- Created: 2019-09-29T15:19:23.000Z (over 5 years ago)
- Default Branch: master
- Last Pushed: 2021-09-16T15:00:38.000Z (over 3 years ago)
- Last Synced: 2025-04-25T13:50:15.737Z (about 1 month ago)
- Language: Python
- Size: 66.4 KB
- Stars: 27
- Watchers: 3
- Forks: 6
- Open Issues: 2
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# SuperPeHasher
SuperPEHasher is a wrapper written in Python3 for several hash algorithms dedicated to PE file. It includes the following:
* MD5, SHA2
* SSDEEP
* PeHash
* Import Hash
* Import Fuzzy
* Rich PE Hash
* Machoc Hash
* Dhash icon
## Getting Started
if you want more information about hashing algorithms you can visit the blog I wrote on [Medium](https://medium.com/@tom_rock/fifty-shades-of-malware-hashing-3783d98df59c?source=friends_link&sk=c3f3ed798e0c087eeb1d368868462724).
### Installing
To run this tool you can git clone and install the requirements.
```
pip install -r requirements.txt
or
pip install superpehasher
```
## Running the test
Once you installed the requirements you can run the file pehasher.py with a file as input.
```
python pehasher.py sample.exe
md5: 60b7c0fead45f2066e5b805a91f4f0fc
sha1: 9018a7d6cdbe859a430e8794e73381f77c840be0
sha256: 80c10ee5f21f92f89cbc293a59d2fd4c01c7958aacad15642558db700943fa22
sha512: 68b9f9c00fc64df946684ce81a72a2624f0fc07e07c0c8b3db2fae8c9c0415bd1b4a03ad7ffa96985af0cc5e0410f6c5e29a30200efff21ab4b01369a3c59b58
ssdeep: 6144:Jv7Wc4dyC7dXNBzn68YoC+6VoQSkgrpZHqk61peBN1L+I8pfezYeWHMzyy14pL1k:JvSbJxPRC+XQSxb6Dc7RwIWHeGL7GOK
ImpHash: f93b5d76132f6e6068946ec238813ce1
ImpFuzzy: 192:q9AW2Rpn8RrMqkNsQYDhs4kqp1qAw5tXLXVn/zgF79KPrzJ:qcp8lUNlc11qAw5tXLXV/zm79KP5
RicHash xored: f0eaf48df96ec9b2f3ae6d616be68b3d
RicHash clear: e169b9c125be3598b84b8651d3f5ff91
PeHash: fa5ad3991616af0bb9d76132db7e9d6009c55baa
Machoc Hash: 5ed7c76d41a02300e08e7177411a02300ead543fa0d346c2ed4ac25a954ac25a951a02300e1a02300e000039423f2825315453253154531a02300e253154532531545325315453[Truncated]
Icon dhash: 5050d270cccc82ae
```
## Built With
* [SSDEEP](https://ssdeep-project.github.io/ssdeep/index.html)
* [PeHash](https://www.usenix.org/legacy/events/leet09/tech/full_papers/wicherski/wicherski_html/index.html)
* [ImpHash](https://www.fireeye.com/blog/threat-research/2014/01/tracking-malware-import-hashing.html)
* [ImpFuzzy](https://github.com/JPCERTCC/impfuzzy)
* [Machoke Hash](https://blog.conixsecurity.fr/machoke-hashing/)
* [PeFile](https://github.com/erocarrera/pefile)