Buster Sandbox Analyzer

[Buster_BSA]

Released Buster Sandbox Analyzer 1.60.

Changes:

+ Added a feature to analyze URLs
+ Added an option at “SQL > Report Manager” feature to import records from an external database
+ Added support for JSON reports
+ Added a feature to avoid screensaver activation while an analysis is being performed
+ Updated LOG_API
+ Fixed several bugs

[Buster_BSA]

Released Buster Sandbox Analyzer 1.61.

Changes:

+ Added a feature at “Risk Evaluation Ratings” to show hints related to malware behaviours
+ Modified the layout to show separately the file being processed from the number of files left to be processed
+ Added new malware behaviours
+ Included new malware behaviour at “Risk Evaluation Ratings”
+ Updated LOG_API
+ Fixed several bugs

[Buster_BSA]

Released Buster Sandbox Analyzer 1.62.

Changes:

+ Added a feature to patch LOG_API automatically
+ Updated LOG_API
+ Fixed several bugs

[Buster_BSA]

No feedback about last versions?

[xXDarkStalkerxX]

Originally Posted by Buster_BSA

No feedback about last versions?

Everything flawless here , gonna try multiple analyses later.

[Buster_BSA]

Originally Posted by xXDarkStalkerxX

Everything flawless here , gonna try multiple analyses later.

Last version (1.62) includes a feature to patch LOG_API automatically. It will be useful when you try multiple analyses.

[Buster_BSA]

Originally Posted by xXDarkStalkerxX

Everything flawless here , gonna try multiple analyses later.

Any comments?

[Nizarawi]

Thanks for your hard work

[Buster_BSA]

Originally Posted by Nizarawi

Thanks for your hard work

You´re welcome!

[Buster_BSA]

Released Buster Sandbox Analyzer 1.63.

Changes:

+ Added “Aggressive Window Closer” feature
+ Added a feature to restore display settings if changed while analysis
+ Added new malware behaviours
+ Improved “Additional Information” feature
+ Improved multiple malware analyses feature
+ Improved “Automate Setups” feature
+ Improved the speed processing certain files
+ Included new malware behaviours at “Risk Evaluation Ratings”
+ Fixed several bugs

[Amin]

hi..

today i downloaded this product , after i extracted it and run the BSA.exe i got error due not loading some necessary dlls (wpcap.dll , packet.dll ) after i downloaded them dlls , again i got different error..

why i just cant make the BSA run ?

somebody help ! i really like to work with this program..

thnx.

[Buster_BSA]

Originally Posted by a m i n

today i downloaded this product , after i extracted it and run the BSA.exe i got error due not loading some necessary dlls (wpcap.dll , packet.dll )

First problem: you tried to run the program without reading the manual or even the README.TXT.

Originally Posted by a m i n

after i downloaded them dlls , again i got different error..

Second problem: You say you get a different error but you don´t say what´s it.

Originally Posted by a m i n

why i just cant make the BSA run ?

somebody help ! i really like to work with this program..

thnx.

Read the manual and watch this video:

-http://www.youtube.com/watch?feature=player_embedded&v=MXASXoq5akc-

before trying to run BSA.

If you have any problem after doing that, come back and explain with details what the problem is.

[Amin]

Originally Posted by Buster_BSA

First problem: you tried to run the program without reading the manual or even the README.TXT.
Second problem: You say you get a different error but you don´t say what´s it.
Read the manual and watch this video:
-http://www.youtube.com/watch?feature=player_embedded&v=MXASXoq5akc-

before trying to run BSA.

If you have any problem after doing that, come back and explain with details what the problem is.

u know what ? u were right.. finally i could run it properly.. and the way i did that looks interesting

here's how.. first i copied all the necessary dlls from C:\bsa\PCAP to system32 folder and then added those 2 lines to sandboxie configuration text.. now everything work well..Im having fun with BSA..

thnx buddy for ur help..

[Buster_BSA]

Originally Posted by a m i n

u know what ? u were right.. finally i could run it properly.. and the way i did that looks interesting

here's how.. first i copied all the necessary dlls from C:\bsa\PCAP to system32 folder and then added those 2 lines to sandboxie configuration text.. now everything work well..Im having fun with BSA..

thnx buddy for ur help..

Copying the necessary DLLs to System32 is just a workaround. You should install WinPCap if you want to capture network traffic.

Also you should add, at least, 3 lines to Sandboxie´s configuration, not 2.

I insist: read the manual.

[Amin]

Originally Posted by Buster_BSA

Copying the necessary DLLs to System32 is just a workaround. You should install WinPCap if you want to capture network traffic.

Also you should add, at least, 3 lines to Sandboxie´s configuration, not 2.

I insist: read the manual.

sorry my bad.. this time i installed the WinPCap & those 3 lines were added as well and RTFM were done

sorry for bothering you dude

[Buster_BSA]

Originally Posted by a m i n

sorry for bothering you dude

Do not worry, I am glad to help you.

[Buster_BSA]

Originally Posted by xXDarkStalkerxX

Everything flawless here , gonna try multiple analyses later.

How much later?

[Buster_BSA]

Released Buster Sandbox Analyzer 1.64.

Changes:

+ Added new malware behaviours
+ Improved “Hide Driver “ manager
+ Improved anti anti-Sandboxie capabilities
+ Included new malware behaviours at “Risk Evaluation Ratings”
+ Updated LOG_API
+ Fixed several bugs

[bleiburg]

just to report this little wrong warning now when 3.70 is out

Warning!
---------------------------
You have installed Sandboxie 3.70.0.0. You should install version 3.69.3.0 or newer!

[Buster_BSA]

Thank you for the report!

[Buster_BSA]

Download the package again to get a bugfixed version 1.64.

[Buster_BSA]

BSA 1.64 package has been updated.

[Buster_BSA]

Released Buster Sandbox Analyzer 1.65.

Changes:

+ Improved “Additional Information” feature
+ Fixed several bugs

[Buster_BSA]

Released Buster Sandbox Analyzer 1.66

Changes:

+ Added new malware behaviours
+ Included new malware behaviours at “Risk Evaluation Ratings”
+ Improved “Dump Executable Processes” feature
+ Updated BSA.DAT
+ Updated LOG_API
+ Fixed several bugs

[Buster_BSA]

maymoons & xXDarkStalkerxX: You promised feedback about new features... where is it?