Search Results for "malware"

...Instead of emulating an entire operating system, it focuses specifically on the native layer, allowing for targeted testing and reverse engineering of shared libraries (.so files). This makes it particularly useful in security research, malware analysis, and debugging of Android applications. The framework provides tools for loading binaries, simulating system calls, and interacting with native functions in a controlled environment. By abstracting away the complexity of full device emulation, it allows faster iteration and more focused analysis of specific components. ...

...Unlike traditional emulators that reimplement full operating system APIs, Sogen works closer to the kernel boundary by intercepting and emulating system calls, allowing it to leverage native system libraries while maintaining granular control. This approach makes it particularly valuable for advanced use cases such as malware analysis, reverse engineering, and DRM research, where precise observation and manipulation of execution flow are critical. The emulator supports multiple backends, including Unicorn Engine and Hyper-V, enabling flexible deployment depending on performance or accuracy requirements. It also includes robust support for loading Portable Executable (PE) files, including proper handling of relocations, thread-local storage, and memory mapping.

A bundle of the Dos-Box software with some old DOS malware for testing purposes. Includes: Dos-Box, CRASH.COM, HH_HH.COM, HYM.COM, KUKU.COM, LSD.COM, and SKYNET.COM (Note: I did not create the Dos-Box software or viruses, I simply packaged them together in a convenient installer )

NOTE: This is the old Swing version. The current version of Jace can be found here: https://github.com/badvision/jace Because of malware injections in other Sourceforge projects, the author has removed all binaries from Sourceforge. You may look at the legacy source still hosted here but are highly encouraged to check out the new version hosted in Github for recent updates on this project. Thank you for your interest in this project! ][ Infinitum!

Automated Analysis and Network Emulation (ANNE) is a sandbox to analyze unknown w32 binaries like malware in a *nix environment in an automated way.