shellcode-analyzer

Load and analyze raw shellcode blobs in x64dbg with optional unpacking.

196|17|Updated Feb 12, 2026

Search Tags:#analysis #debugger #static-analysis #dynamic-analysis #unpacking #shellcode #x64dbg

Ready to run

npx skills add https://github.com/dariushoule/x64dbg-skills --skill shellcode-analyzer

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: shellcode-analyzer
Source: https://github.com/dariushoule/x64dbg-skills/tree/main/skills/shellcode-analyzer
Command: npx skills add https://github.com/dariushoule/x64dbg-skills --skill shellcode-analyzer

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Load raw shellcode into x64dbg for safe, repeatable analysis, enabling unpacking, static inspection, and dynamic tracing without manual setup.

Core Features & Use Cases

Load & execute shellcode blobs in a controlled x64dbg session for immediate observation.
Unpack / decode encoded payloads to reveal the final payload and entry points.
Static analysis including instruction disassembly, API resolution insight, and embedded data discovery.
Dynamic analysis guidance with breakpoint planning, step-through tracing, and runtime state inspection.
Use Case: Researchers analyzing a malware shellcode can load the blob, unpack it, and study the decoding loop before observing network or API activity.

Quick Start

Provide the path to a raw shellcode blob on disk and the path to the x64dbg binary, then start the skill to load, unpack if requested, and begin static and dynamic analysis.

Frequently Asked Questions about shellcode-analyzer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I load and analyze raw shellcode in x64dbg?▼

To analyze shellcode in x64dbg, provide the disk path to the raw blob and the x64dbg binary. The skill handles memory allocation, optional NOP sled insertion, and disassembly to begin static and dynamic inspection safely.

Can I unpack encoded shellcode payloads before starting dynamic analysis?▼

Yes, you can unpack encoded shellcode payloads before dynamic analysis. The skill provides guided unpacking steps to decode payloads, revealing the final payload and entry points for interpreter-safe exploration and runtime state inspection.

What static analysis features are available for shellcode blobs?▼

Static analysis features for shellcode blobs include instruction disassembly, API resolution insight, and embedded data discovery. These allow malware researchers to study decoding loops and identify signatures without executing the payload dynamically.

Does this shellcode analysis approach support breakpoint planning and step-through tracing?▼

Yes, this shellcode analysis approach supports breakpoint planning and step-through tracing. It provides dynamic analysis guidance to inspect runtime states and observe network or API activity during a controlled x64dbg session.

Do I need any dependencies to start unpacking shellcode with x64dbg?▼

No dependencies are required to start unpacking shellcode with x64dbg. You only need the disk path to your raw shellcode blob and the x64dbg binary path to initialize the controlled analysis environment.

What is the best way to generate a report from shellcode static and dynamic analysis?▼

The best way to generate a report from shellcode analysis is using the skill's optional report generation feature. It consolidates findings from static disassembly, signature scanning, and dynamic tracing into a final output.