Plugin focus: Generating signatures for Nim and other non-C programming languages

This is a guest entry written by Holger Unterbrink from Cisco Talos. His views and opinions are his own and not those of Hex-Rays. Any technical or maintenance issues regarding the code herein should be directed to the author.

Adversaries are increasingly writing malware in programming languages such as Go, Rust, or Nim, likely because these languages present challenges to investigators using reverse engineering tools designed to work best against the C family of languages.

It’s often difficult for reverse …

adversaries author cisco cisco talos code entry focus hex hex-rays languages maintenance malware malware analysis nim non opinions own plugin programming signatures talos technical writing written