{
  "added_at": "2026-11-06",
  "category": "dynamic-analysis",
  "description_en": "mal_unpack is a Windows dynamic unpacker based on PE-sieve. It runs a packed malware executable, waits for its payload to unpack, dumps the payload, and terminates the original process.",
  "description_zh": "mal_unpack 是基于 PE-sieve 的 Windows 动态脱壳工具。它运行经过加壳的恶意软件，等待载荷解包后将其转储，并终止原始进程。",
  "entry_url": "https://awesomerea.org/resources/mal-unpack/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/mal-unpack/",
  "evidence_url": "https://github.com/hasherezade/mal_unpack/blob/cecb9eed03c63d651c5b47834b15bac8086cb2fb/README.md",
  "group": "tools",
  "id": "mal-unpack",
  "json_url": "https://awesomerea.org/resources/mal-unpack/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/mal-unpack/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/mal-unpack/index.md",
  "name": "mal_unpack",
  "name_zh": "mal_unpack 动态脱壳工具",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Run on Windows and provide a packed malware executable.",
    "Use only in a virtual machine because the tool launches the original malware.",
    "License: BSD-2-Clause."
  ],
  "requirements_zh": [
    "在 Windows 上运行，并提供经过加壳的恶意软件可执行文件。",
    "仅在虚拟机中使用，因为该工具会启动原始恶意软件。",
    "许可证：BSD-2-Clause。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/hasherezade/mal_unpack",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}