Malfunction
A Python toolset for malware analysis using function-level fuzzy hashing to catalog and compare malicious binaries.
What is Malfunction?
Malfunction is an open-source malware analysis toolset that uses function-level fuzzy hashing to catalog and compare malicious binaries. It automates static analysis by extracting function signatures from known malware and benign software, then generates reports on unknown files by matching them against a database. This helps security researchers identify and classify malware more efficiently.
Security researchers, malware analysts, and reverse engineers who need to automate static malware analysis and compare binaries at a granular function level.
Developers choose Malfunction for its specialized focus on function-level analysis using fuzzy hashing, which provides more detailed comparisons than whole-file hashing. Its integration with Radare2 ensures accurate function extraction, and the Python-based toolset is extensible for custom analysis workflows.
Overview
Malware Analysis Tool using Function Level Fuzzy Hashing
Use Cases
Best For
- Automating static malware analysis workflows
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
