Expand description
String extraction from PE binary data.
Scans raw bytes for runs of printable ASCII characters and UTF-16LE text. Used to find embedded C2 URLs, file paths, registry keys, and IOC strings.
Constants§
- MIN_
STRING_ LEN - Minimum string length (in characters) to include in the output.
Functions§
- compute_
entropy - Shannon entropy of a byte slice (0.0 – 8.0).
- extract_
ascii - Extract ASCII strings of at least
min_lenconsecutive printable chars frombytes. - extract_
utf16le - Extract UTF-16LE strings of at least
min_lenprintable chars frombytes.