MalUnpack
A dynamic unpacker for Windows malware that deploys packed executables, waits for payload unpacking, and dumps the extracted code.
What is MalUnpack?
mal_unpack is a dynamic unpacker tool for Windows malware analysis that executes packed executables, waits for them to unpack their payload in memory, and then dumps the extracted code. It solves the problem of analyzing obfuscated malware by capturing the deobfuscated payload during runtime, enabling deeper inspection of malicious behavior.
Security researchers, malware analysts, and reverse engineers focused on Windows-based threats who need to unpack and analyze packed or encrypted malware samples.
Developers choose mal_unpack for its integration with PE-sieve, providing reliable memory dumping of implants and shellcodes, along with configurable options for different unpacking scenarios, making it a specialized tool for dynamic malware analysis.
Overview
Dynamic unpacker based on PE-sieve
Use Cases
Best For
- Dumping unpacked payloads from memory during malware execution
- Analyzing packed or obfuscated Windows executables
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
