Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
hasherezade authored Dec 29, 2024
1 parent a022557 commit 192d9fa
Showing 1 changed file with 7 additions and 0 deletions.
7 changes: 7 additions & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -25,6 +25,13 @@ It deploys a packed malware, waits for it to unpack the payload, dumps the paylo
mal_unpack.exe /exe <path_to_the_malware> /timeout <timeout: ms>
```

+ By default, it dumps implanted PEs.
+ If you want to dump shellcodes, use the option: `/shellc`.
+ If you want to dump modified/hooked/patched PEs, use the option `/hooks`.
+ If you want to automatically reconstruct the dynamic Import Table (or list the imports loaded into the shellcode), use the option `/imp`.

All available arguments are documented on [Wiki](https://github.com/hasherezade/pe-sieve/wiki). They can also be listed using the argument `/help`.

**WARNING:** This unpacker deploys the original malware. Use it only on a VirtualMachine.

ℹ For the best performance, install [MalUnpackCompanion driver](https://github.com/hasherezade/mal_unpack_drv).
Expand Down

0 comments on commit 192d9fa

Please sign in to comment.