ByteScope Ultimate v5.0

Professional defensive static malware-triage application by Faiz Ali.

Advanced features

• YARA rule support
• VirusTotal API v3 hash reputation lookup
• MITRE ATT&CK heuristic mapping
• PE import-table analysis
• Digital-signature verification through osslsigncode
• Packer/protector detection
• Suspicious PE-section analysis
• IOC extraction
• ZIP archive inspection
• EICAR test signature detection
• PDF, JSON, and TXT reports

Accuracy notice

No malware scanner can accurately classify every possible file. ByteScope combines multiple static signals and reputation data, but final conclusions still require several antivirus engines, sandboxing, reverse engineering, and forensic context.

Install on Kali/Debian

sudo apt update
sudo apt install python3 python3-tk python3-reportlab osslsigncode -y
python3 -m pip install --user pefile yara-python

On externally managed Python installations, use a virtual environment:

python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt

Run

python3 app.py

Open Settings inside the application to add:

• Your VirusTotal API key
• The YARA rules folder (the included rules folder is selected by default)

VirusTotal integration performs hash lookup only. ByteScope does not upload the selected file.

Author

Faiz Ali