Detect packing tools and unpack UPX-packed executables.
npx skills add https://github.com/258369123/CTFAgent --skill unpacking-skills
Please help me install this Agent Skill. Skill: unpacking-skills Source: https://github.com/258369123/CTFAgent/tree/main/.agents/skills/unpacking Command: npx skills add https://github.com/258369123/CTFAgent --skill unpacking-skills
This Skill simplifies the process of detecting and unpacking packed executables, streamlining the analysis of potentially malicious files.
Use the unpacking-skills to detect and unpack a packed executable file named 'malware.exe'.
High-intent search queries and answers about installing and using this skill.
To unpack a UPX-packed executable, this Skill identifies the packing tool and applies an automated unpacking process to extract the original file. It also creates a backup of the original file and provides detailed logs for traceability during security analysis.
During executable unpacking, the shell detection mechanism identifies common packing tools including UPX, ASPack, PECompact, RLPack, and NSPack. This detection helps determine the appropriate approach for analyzing potentially malicious files in software reverse engineering.
Yes, you need Python installed along with specific unpacking tools like diec and upx to detect and unpack packed executables. These dependencies are required to execute the automated unpacking process and accurately identify various shell packing mechanisms.
You cannot automatically unpack an ASPack-packed executable; the automated unpacking process specifically targets UPX-packed files. However, the Skill will successfully detect ASPack and other packers like PECompact, providing detailed logs to assist manual reverse engineering.
The best way to analyze packed malware files while preserving the original sample is using an unpacking process that automatically creates backups. This Skill generates backups of original files before unpacking and provides detailed logs for traceability during security research.
YukiIto1999Identify UPX-packed malware and restore original executables for static analysis.
Liberty91LTDIdentify malware samples and extract static and dynamic indicators from reports.
sayseven7Analyze obfuscated binaries to recover control flow, strings, and imports.
dariushouleTrace unpacking stubs in x64dbg to identify the original entry point of packed PE executables.
