
ExportHider
ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

ExportHider: Generating Export Table during Runtime to Hide the Exported Functions from the DLL File.

A script to detect stack-strings by using emulation (leveraging Unicorn)

Golang bindings for PE-sieve

match functions in binaries by what they do, not what their bytes look like. behavioral function fingerprinting via microexecution.

Unpack and deobfuscate VMProtect 2 protected binaries with an emulation-based VM explorer, handler profiler, and experimental LLVM recompiler for…

.NET deobfuscator and unpacker.

Django application that performs SAST and Malware Analysis for Android APKs

A ProcessMonitor visualization application written in rust.

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.