Zerosecurity Information Security News 
Related Articles
ListModules is a new tool to analyze PE files, like my AnalyzePESig tool. In stead of analyzing all files you point it to, it takes a snapshot of all processes, and analyses the modules (.exe, .dll, …) loaded in these processes. The output is very similar to AnalyzePESig’s output.
Sysinternal’s tool ListDLLs is a similar tool, but ListModules provides more info and is open source.
It helped me a couple of times to find malicious DLLs loaded inside processes that the AV would not catch.
