Useful Yara rules that I made/use.
-
Updated
Jul 13, 2021 - YARA
Useful Yara rules that I made/use.
Android unpacker: scan → dump → repair → verify. 24 packer vendors, 3 engines (Memory/Frida/eBPF), DEX repair pipeline.
Malware analysis and behavioral monitoring platform with Frida instrumentation, PE static analysis, DNS spoofing honeypot, and real-time web dashboard.
Static PE malware analysis engine and explainable verdicts without execution
PE (Windows executable) forensic analyzer — pe-core parses PE32/PE64 headers (sections, imports, entropy); pe-analysis grades MITRE-tagged anomalies (suspicious imports, packing/entropy, process-injection IOCs)
Detect packed, compressed or encrypted Linux ELF binaries with Shannon entropy. Pure Python, no dependencies.
纯 Python PE 文件结构异常扫描器 | Pure-Python PE structural anomaly scanner - packer detection, RWX scan, entropy analysis
Defensive PE/ELF packer analysis lab with entropy maps, UPX signatures, and explainable reports
Detect IT Easy Software presents Detect IT Easy, a cross-platform binary inspection project for identifying file types, compilers, packers, cryptors, and protectors. Explore signature matching, native format parsing, JavaScript analysis, YARA support, entropy tools, strings, hex inspection, and disassembly.
Static RE assistant: auto-deobfuscation hints, packer triage and embedded payload detection for ELF binaries.
A modern PE static analysis tool for reverse engineers, malware analysts, and security researchers.
To associate your repository with the packer-detection topic, visit your repo's landing page and select "manage topics."