un{i}packer
An automatic, platform-independent unpacker for Windows binaries using emulation to analyze packed malware.
What is un{i}packer?
Un{i}packer is an automatic unpacker for Windows PE files that uses emulation to extract the original code from packed binaries, particularly malware samples. It solves the problem of platform dependency in malware analysis by allowing unpacking on any operating system without requiring a Windows machine. The tool supports several popular packers and can be extended to handle others through its modular design.
Security researchers, malware analysts, and students who need to analyze packed Windows binaries, especially in environments where Windows tools are not available or when automating analysis pipelines.
Developers choose Un{i}packer because it provides a free, open-source alternative to manual unpacking or Windows-only tools, offering platform independence through emulation and ease of integration via Docker and Python. Its support for multiple packers and extensibility make it a versatile choice for malware analysis workflows.
Overview
Automatic and platform-independent unpacker for Windows binaries based on emulation
Use Cases
Best For
- Automating the unpacking of packed malware samples in security research
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
