Windows Executables

PefilePython

A Python module for parsing and working with Portable Executable (PE) files, providing access to headers, sections, and embedded data.

EmberJupyter Notebook

An open dataset and toolkit for training static PE malware machine learning models, featuring millions of labeled Windows executable samples.

IDRC++

Interactive Delphi Reconstructor (IDR) is a decompiler for Delphi-compiled Windows executables and DLLs, focusing on static analysis.

PEPackC

A command-line toolkit for analyzing and working with Portable Executable (PE) binaries on multiple platforms.

RecomposerPython

Randomly modifies Win32/64 PE files to change their hashes for safer uploading to malware analysis sites.

PeLibC++

A library for parsing and manipulating Windows Portable Executable (PE) files.

MaleXHTML

A curated dataset of 1,044,394 Windows executable samples with frequency-domain image representations for malware detection research.