Symbian Malware Detection

EPOC Executable Dumper - with Imports identified
DmpE32.pl - Executable information dumper. Notes       Download Mirror(SecurityFocus)
Requires Disassemble::X86 module.
Makefn - Tool for Ordinal to Import mapping now included..
importfn.tgz - import function labels updated for Series 60     Download removed. Why

Procedure table utilities:
* OPLprocdump - Module that provides access to procedure table for the following utilities:
* ProcTableEdit - Simple OPL procedure table editor
* ProcTableHeur - Heuristic detection of viruses from procedure table abnormalities.

OPL Procedure Table Utilities Ver. 0.6       Info and Download

Disarm.pm - Perl port of GPL disassembler       Info and Download

DumpSis.pl:
* Used in the analysis of SymbOS.Cabir
* File list and version information
* Extract files withut installing entire package
* Works with Symbian OS 5 and 6 SIS files
* Dumps all language versions of a file.
* SISX files are not handled.
* SisDump.pm - Access Sis file as object.
DumpSis.pl ver. 0.9 - Symbian SIS File Dumper          Info and Download (Newest)
Documentation

Symbian Malware: OPL32 Infector Detection Version 0.4(PDF)        Mirror(SecurityFocus)

EPOC Exe format with hex offsets       Download

DMCA text

Update       After July 5, 2004 check blog below.     LINKS       Contact: jfldars via yahoo.com

GNU Sam PNG courtesy of GNU/ART(http://gnuart.onshore.com)

Hosted by www.Geocities.ws