Tools

Impfuzzy – Volatility plugin Fuzzy Hash calculated from import API of PE files

impfuzzy plugin

Impfuzzy – Volatility plugin Fuzzy Hash calculated from import API of PE files

 pyimpfuzzy

Python module for comparing the impfuzzy

More details are described in the following documents:
https://www.jpcert.or.jp/magazine/acreport-impfuzzy.html (Japanese)
https://blog.jpcert.or.jp/2016/05/classifying-mal-a988.html (English)

impfuzzy for Volatility

Volatility plugin for comparing the impfuzzy and imphash

More details are described in the following documents:
https://www.jpcert.or.jp/magazine/acreport-impfuzzy_volatility.html (Japanese)
https://blog.jpcert.or.jp/2016/12/a-new-tool-to-d-d6bc.html (English)

DOWNLOAD

Comment here