Dailydave mailing list archives

Re: VPC


From: Jared DeMott <demottja () msu edu>
Date: Fri, 22 Feb 2008 10:41:21 -0500


Hint : There are better ones than CWsandbox,
- Joebox
  
I just took a very quick look at Joebox.  Seems like it has potential, 
but not currently better than CWSandbox.  For example, Joebox analysis 
says:

"The attached zip document contains all kind of behaviour information which Joebox has detected. 
Please note that Joebox currently only analyse file system, registry system and process system behaviour. 
Analysis information aboutnetwork, services and thread activities will be added in the next months. 
The analysis machine which executes your submitted binaries has no access to the internet. 
An all time available internet connection is a too high risk either to be detected (via dns) or to be controlled by 
malware (we use real machines to analyse) which bypasses our used disk protection tools."


My first and (seriously) humble opinion would be to correct typos in the 
automated response.

Blessings,
Jared
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave


Current thread: