lightweight Go package to parse, analyze and extract metadata
Saferwall PE is a lightweight Go package for parsing, analyzing, and extracting metadata from Portable Executable (PE) binaries. Designed with malware analysis in mind, it is robust against malformed PE files and provides detailed insights into executable structures.
Pokas x86 Emulator is an Application-Only emulator created for generic unpacking and testing the antivirus detection algorithms. it emulates the PE Executable Files 32-bits versions and monitor all memory writes and include many features. AmrThabet