Repository Index

Collection of malware source code for a variety of platforms in an array of different programming languages.

• malware
• malware-research
• malware-development
• malware-detection

A repository of LIVE malwares for your own joy and pleasure. theZoo is a project created to make the possibility of malware analysis open and available to the public.

• malware
• malware-analysis
• malware-samples
• malware-research

Program for determining types of files for Windows, Linux and MacOS.

• debugger
• detect
• unpacker
• disassembler

Android virtual machine and deobfuscator

• deobfuscation
• java
• optimization
• android

Malware Configuration And Payload Extraction

• configs
• debugging-tools
• malware
• malware-analysis

Android Application Identifier for Packers, Protectors, Obfuscators and Oddities - PEiD for Android

• android
• antivirus
• machine-learning
• malware-detection

yarGen is a generator for YARA rules

• python
• yara
• malware
• malware-research

Extract and aggregate threat intelligence.

• ioc
• indicators-of-compromise
• threatintel
• threat-intelligence

Sandboxed Execution Environment

• python
• sandbox
• malware-analysis
• malware-research

The PE file analysis toolkit

• binary-analysis
• reverse-engineering
• pe-file
• portable-executable

Collection of almost 40.000 javascript malware samples

• malware-samples
• malware-research
• javascript
• malware-jail

WinDBG Anti-RootKit Extension

• kernel-mode
• c-plus-plus
• malware
• malware-analysis

Modular file scanning/analysis framework

• python
• analytic-machines
• analysis-framework
• python-script

Linker/Compiler/Tool detector for Windows, Linux and MacOS.

• detect
• reverse-engineering
• signature
• malware-analysis

Defanged Indicator of Compromise (IOC) Extractor.

• ioc
• indicators-of-compromise
• library
• ioc-extractor

Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js

• malware-samples
• wscript
• deobfuscation
• angler

A SDK for the creation of analysis tools without obtaining app source code in order to profile runtime performance, examine code coverage, and track high-risk behaviors of a given app on Android 5.0 and above.

• binary-instrument
• android
• malware-research
• reverse-engineering

Python implementation of the Packed Executable iDentifier (PEiD)

• peid
• peid-signature
• pe-file
• pe-files

A Python library and command line tools to provide interactive log visualization.

• cybersecurity
• investigation
• malware-analysis
• malware-research

BluePill: Neutralizing Anti-Analysis Behavior in Malware Dissection (Black Hat Europe 2019, IEEE TIFS 2020)

• malware-analysis
• reverse-engineering
• debugger
• malware

A modular Python application to pull intelligence about malicious files

• malware-analysis
• malware-research
• investigation
• cybersecurity

Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection

• docker-image
• executable-packing
• malware-packers
• research-platform

Analysis tool for estimating the likelihood that a binary contains compressed or encrypted bytes

• entropy
• pe-file
• pe-files
• pe-format

Packing detection tool for PE files

• detector
• pe-file
• pe-format
• peid