{
  "added_at": "2026-11-06",
  "category": "native-analysis",
  "description_en": "PackerScope scans Windows PE executables for packer signatures and structural indicators, including entropy, sections, imports and entry-point instructions. It can invoke supported unpackers and check PE integrity, entropy and import-table recovery before generating reports.",
  "description_zh": "PackerScope 检查 Windows PE 可执行文件的熵、节区、导入表、入口指令和加壳签名。对受支持的文件可执行脱壳，并检查 PE 结构、熵及导入表恢复情况，随后生成报告。",
  "entry_url": "https://awesomerea.org/resources/packerscope/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/packerscope/",
  "evidence_url": "https://github.com/salmanmallah/packerscope/blob/db2ea6db6105ce45decd0fef0c01f16d87dc7225/README.md",
  "group": "tools",
  "id": "packerscope",
  "json_url": "https://awesomerea.org/resources/packerscope/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/packerscope/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/packerscope/index.md",
  "name": "PackerScope",
  "name_zh": "PackerScope PE 加壳分析框架",
  "record_type": "resource",
  "relationship": "foundation",
  "requirement_facets": [
    "prerequisites",
    "prerequisites",
    "prerequisites",
    "license"
  ],
  "requirements": [
    "Python 3.10–3.13 is listed as the supported range.",
    "Capstone, yara-python and ppdeep are optional analysis dependencies.",
    "UPX unpacking requires an external upx executable.",
    "MIT licence."
  ],
  "requirements_zh": [
    "支持的 Python 版本为 3.10 至 3.13。",
    "Capstone、yara-python 和 ppdeep 是可选分析依赖。",
    "UPX 脱壳需要外部 upx 程序。",
    "采用 MIT 许可证。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/salmanmallah/packerscope",
  "verification": "source-reviewed",
  "verified_at": "2026-11-06"
}