Useful Yara rules that I made/use.
-
Updated
Jul 13, 2021 - YARA
Useful Yara rules that I made/use.
Android unpacker: scan → dump → repair → verify. 24 packer vendors, 3 engines (Memory/Frida/eBPF), DEX repair pipeline.
Malware analysis and behavioral monitoring platform with Frida instrumentation, PE static analysis, DNS spoofing honeypot, and real-time web dashboard.
Static PE malware analysis engine and explainable verdicts without execution
PE (Windows executable) forensic analyzer — pe-core parses PE32/PE64 headers (sections, imports, entropy); pe-analysis grades MITRE-tagged anomalies (suspicious imports, packing/entropy, process-injection IOCs)
纯 Python PE 文件结构异常扫描器 | Pure-Python PE structural anomaly scanner - packer detection, RWX scan, entropy analysis
Themida unpacker: OEP finder, VM stub dumper, IAT rebuild, section dump for patched Themida targets.
Defensive PE/ELF packer analysis lab with entropy maps, UPX signatures, and explainable reports
Static RE assistant: auto-deobfuscation hints, packer triage and embedded payload detection for ELF binaries.
A modern PE static analysis tool for reverse engineers, malware analysts, and security researchers.
To associate your repository with the packer-detection topic, visit your repo's landing page and select "manage topics."