CERT-Polska / malduck

:duck: Malduck is your ducky companion in malware analysis journeys

CERT-Polska/malduck Issues

Various improvements (adopt best practices)
Updated 5 months ago
error in running karton-config-extractor in docker
Closed 5 months ago3
Retrieving XOR key from yara engine
Updated 6 months ago
Error when running karton-config-extractor in docker
Updated 6 months ago1
Ditch setup.py
Updated 6 months ago1
Automatically apply the PE's bitness when calling `disasmv`
Updated 7 months ago
ProcessMemoryPE.get_fixed_pe() method
Closed 8 months ago1
Better failed extraction detection
Updated 9 months ago
Yara matches are incorrectly mapped to carved binaries
Closed a year ago
Output Standardization??
Updated a year ago
Compatibility issues with yara-python v4.3.0
Closed a year ago
CAPEv2 dependency issue
Closed a year ago
File Extraction for Karton Pipeline
Updated a year ago
IntType slowness (fixed ints)
Updated a year ago
Support headerless decompression for zlib
Updated a year ago2
Would it be possible to update the pefile version
Closed 2 years ago2
Allow for disasm calls without specifying the size of the buffer
Updated 2 years ago
Consider issuing a warning for empty `__init__.py` file in a module
Closed 2 years ago
Consider raising an error when "yara_rules' in module is a string
Closed 2 years ago
Missing fixed argument for multiplied IntType
Closed 2 years ago
More keymodes for des3
Closed 2 years ago
Support for inline Yara rules in addition to .yar files
Updated 2 years ago
Document that malduck tries to extract each file using multiple loading methods
Updated 2 years ago
[integrations] question
Closed 3 years ago5
Document malduck config extractor creation step by step
Updated 3 years ago
Re-enable type checks for malduck.crypto.camellia
Closed 3 years ago
Add long_description from README.md
Closed 3 years ago
Catch trivial resource access exception in FastPE
Closed 3 years ago
Disassemble N instructions
Closed 4 years ago
Provide access to the content of the matched strings
Closed 4 years ago1
Drop Python 2 compatability support
Closed 4 years ago2
Add decorator @Extractor.rule for specific rules
Closed 4 years ago
Optional `bitsize` argument and endianess in `bigint`
Closed 4 years ago