Top 8 C malware-analysis Projects

radare2

9 19,558 9.9 C

UNIX-like reverse engineering framework and command-line toolset
pafish

17 2,996 5.5 C

Pafish is a testing tool that uses different techniques to detect virtual machines and malware analysis environments in the same way that malware families do

Project mention: Is there still a way to counter virtual machine detection by popular anti cheat? | /r/VFIO | 2023-12-05

Pafish is what you asking for, but as u/ForceBlade wrote, you cannot win this game.

WorkOS

workos.com sponsored

The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
hollows_hunter

4 1,870 7.5 C

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks, in-memory patches).
dumpulator

3 659 6.8 C

An easy-to-use library for emulating memory dumps. Useful for malware analysis (config extraction, unpacking) and dynamic analysis in general (sandboxing).
mal_unpack

1 629 5.5 C

Dynamic unpacker based on PE-sieve
Stuxnet-Source

2 144 5.5 C

stuxnet Source & Binaries. ONLY FOR ACADEMICAL RESEARCH AND EDUCATIONAL PURPOSES! Includes: Source files, Binaries, PLC Samples,Fanny Added in another repo.
xzre

1 57 8.8 C

XZ backdoor reverse engineering

Project mention: The xz sshd backdoor rabbithole goes quite a bit deeper | news.ycombinator.com | 2024-04-06

InfluxDB

www.influxdata.com sponsored

Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
hem-hashes

1 34 6.0 C

Hiew External Module (HEM) to calculate CRC-32, MD5, SHA-1, and SHA-256 hashes of a given file/block

Project mention: Hiew editor plugin to calculate MD5, SHA-1, and SHA-256 hashes for a given file/block | /r/ReverseEngineering | 2023-07-29

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2024-04-06.