Tool
mal_unpack
mal_unpack is a Windows dynamic unpacker based on PE-sieve. It runs a packed malware executable, waits for its payload to unpack, dumps the payload, and terminates the original process.
- Targets
- Binary
- Category
- Debugging and dynamic analysis
- Relationship
- Foundation tool
- Sources reviewed
Requirements & limits
- Run on Windows and provide a packed malware executable.
- Use only in a virtual machine because the tool launches the original malware.
- License: BSD-2-Clause.
About this entry
The description was reviewed against primary sources.
Primary sources
- README.md GitHub · hasherezade/mal_unpack · Revision cecb9ee