docem

de4dot

An open source .NET deobfuscator and unpacker that restores packed and obfuscated assemblies by reversing various obfuscation techniques.

CAPA

CAPA is a static analysis tool that detects and reports capabilities in executable files across multiple formats, mapping findings to MITRE ATT&CK tactics and techniques.

Shellcode2PE

A Python script that converts shellcode into a PE32 or PE32+ file.

Yabin

Yabin creates Yara signatures from malware to find similar samples.

manalyze

A static analysis tool for PE files that identifies potential malicious indicators through compiler detection, packing analysis, signature matching, and suspicious string identification.

Intezer

Intezer is a cloud-based malware analysis platform that detects and classifies malware using genetic code analysis.

Android Malware Sandbox

A sandbox for quickly sandboxing known or unknown families of Android Malware

Hybrid-Analysis

Falcon Sandbox is a malware analysis framework that provides in-depth static and dynamic analysis of files, offering hybrid analysis, behavior indicators, and integrations with various security tools.

Hooker

An open-source dynamic analysis framework that intercepts and monitors API calls in Android applications using the Android Substrate framework.