{"action":"closed","issue":{"url":"https://api.github.com/repos/secrary/SSMA/issues/40","repository_url":"https://api.github.com/repos/secrary/SSMA","labels_url":"https://api.github.com/repos/secrary/SSMA/issues/40/labels{/name}","comments_url":"https://api.github.com/repos/secrary/SSMA/issues/40/comments","events_url":"https://api.github.com/repos/secrary/SSMA/issues/40/events","html_url":"https://github.com/secrary/SSMA/issues/40","id":280815678,"number":40,"title":"Expanding SSMA","user":{"login":"pielco11","id":17363750,"avatar_url":"https://avatars3.githubusercontent.com/u/17363750?v=4","gravatar_id":"","url":"https://api.github.com/users/pielco11","html_url":"https://github.com/pielco11","followers_url":"https://api.github.com/users/pielco11/followers","following_url":"https://api.github.com/users/pielco11/following{/other_user}","gists_url":"https://api.github.com/users/pielco11/gists{/gist_id}","starred_url":"https://api.github.com/users/pielco11/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pielco11/subscriptions","organizations_url":"https://api.github.com/users/pielco11/orgs","repos_url":"https://api.github.com/users/pielco11/repos","events_url":"https://api.github.com/users/pielco11/events{/privacy}","received_events_url":"https://api.github.com/users/pielco11/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2017-12-10T15:01:34Z","updated_at":"2017-12-14T22:02:53Z","closed_at":"2017-12-14T22:02:53Z","author_association":"CONTRIBUTOR","body":"Hi all,\r\n\r\nI found [this](https://github.com/tylabs/quicksand_lite) interesting repo, in short \r\n\r\n> QuickSand is a compact C framework to analyze suspected malware documents to 1) identify exploits in streams of different encodings, 2) locate and extract embedded executables. By having the ability to locate embedded obfuscated executables, QuickSand could detect documents that contain zero-day or unknown obfuscated exploits.\r\n\r\nI think that could be interesting using that to extract embedded exes and analyze them with SSMA, a great problem is that's wrote in C and \"porting\" C to Python is not so easy (at least for me).\r\n\r\nA workaround could be extracting exes (something with subprocess or stuff like that) to a specific dir and then let SSMA analyze them."}}
{"actor":{"display_login":"pielco11"}}