Dailydave mailing list archives
Re: VPC
From: Jared DeMott <demottja () msu edu>
Date: Fri, 22 Feb 2008 10:41:21 -0500
Hint : There are better ones than CWsandbox, - Joebox
I just took a very quick look at Joebox. Seems like it has potential, but not currently better than CWSandbox. For example, Joebox analysis says: "The attached zip document contains all kind of behaviour information which Joebox has detected. Please note that Joebox currently only analyse file system, registry system and process system behaviour. Analysis information aboutnetwork, services and thread activities will be added in the next months. The analysis machine which executes your submitted binaries has no access to the internet. An all time available internet connection is a too high risk either to be detected (via dns) or to be controlled by malware (we use real machines to analyse) which bypasses our used disk protection tools." My first and (seriously) humble opinion would be to correct typos in the automated response. Blessings, Jared _______________________________________________ Dailydave mailing list Dailydave () lists immunitysec com http://lists.immunitysec.com/mailman/listinfo/dailydave
Current thread:
- VPC Dave Aitel (Feb 21)
- Re: VPC Kurt Baumgartner (Feb 22)
- Re: VPC John H. Sawyer (Feb 23)