binary-triage

Instructions We are triaging a binary to quickly understand what it does. This is an initial survey, not deep analysis. Our goal is to:

Present triage findings to the user in this structured format:

Suspicious Indicators [Bulleted list of red flags discovered, prioritized by severity]

通过调查内存布局、字符串、导入/导出和函数来执行初始二进制文件分类，以快速了解二进制文件的用途并识别可疑行为。当第一次检查二进制文件、当用户要求分类/调查/分析程序或想要在更深入的逆向工程之前进行概述时使用。 来源：cyberkaida/reverse-engineering-assistant。