Devil-Fish

Version: 1.0.0

Devil-Fish is a Windows application for analyzing Portable Executable (PE) files such as EXE and DLL files. It provides information about the file structure, security features, indicators of compromise, and other characteristics that may be useful during reverse engineering, malware analysis, or general security research.

Features

• PE header inspection
• Security feature detection (ASLR, DEP, CFG, etc.)
• Section analysis and entropy calculation
• Import and export analysis
• Resource inspection
• Digital signature detection
• Overlay detection
• Packer detection
• YARA rule scanning
• IOC extraction
• MITRE ATT&CK technique mapping
• Malware family heuristics
• Behavior correlation
• Executive summary
• JSON report generation

Requirements

• Windows 10 or Windows 11 (64-bit)

Running Devil-Fish

Start DevilFish.exe and enter the full path of the executable you want to analyze.

Example:

C:\Windows\System32\calc.exe

After the analysis is complete, the results are displayed in the console and saved as:

report.json

Notes

• Supports PE executable files (.exe) and dynamic-link libraries (.dll).
• Intended for defensive security research, malware analysis, reverse engineering, and educational use.
• Does not modify the analyzed file.

License

MIT License