Malware analysis and behavioral monitoring platform with Frida instrumentation, PE static analysis, DNS spoofing honeypot, and real-time web dashboard.
-
Updated
Jul 6, 2026 - Python
Malware analysis and behavioral monitoring platform with Frida instrumentation, PE static analysis, DNS spoofing honeypot, and real-time web dashboard.
Useful Yara rules that I made/use.
PE (Windows executable) forensic analyzer — pe-core parses PE32/PE64 headers (sections, imports, entropy); pe-analysis grades MITRE-tagged anomalies (suspicious imports, packing/entropy, process-injection IOCs)
Static PE malware analysis engine and explainable verdicts without execution
纯 Python PE 文件结构异常扫描器 | Pure-Python PE structural anomaly scanner - packer detection, RWX scan, entropy analysis
Defensive PE/ELF packer analysis lab with entropy maps, UPX signatures, and explainable reports
Add a description, image, and links to the packer-detection topic page so that developers can more easily learn about it.
To associate your repository with the packer-detection topic, visit your repo's landing page and select "manage topics."