analyzing-packed-malware-with-upx-unpacker

Identifies and unpacks UPX-packed malware samples, including binaries with modified UPX magic bytes or headers that block automated decompression, to recover the original executable for static analysis. Use when a sample shows high entropy, minimal imports, or only LoadLibrary/GetProcAddress in its import table, or when preparing a packed binary for disassembly in Ghidra or IDA. '

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• docx 193,970 ★
  Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Wo
• pdf 193,970 ★
  Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text
• pptx 193,970 ★
  Use this skill any time a .pptx or .potx file is involved in any way — as input, output, or both. This include
• xlsx 193,970 ★
  Use this skill any time a spreadsheet file is the primary input or output. This means any task where the user
• backup-setup 116,728 ★
  Set up, check, or restore local claude-mem database snapshots. Use when the user says "set up backups", "back