Dumpulator - An Easy-To-Use Library For Emulating Memory Dumps. Useful For Malware Analysis (Config Extraction, Unpacking) And Dynamic Analysis In General (Sandboxing)

Note: This is a work-in-progress prototype, please treat it as such. Pull requests are welcome! You can get your feet wet with good first issues

An easy-to-use library for emulating code in minidump files. Here are some links to posts/videos using dumpulator:

• Introduction video with OALabs: Dumpulator - Using Binary Emulation To Automate Reverse Engineering
• Emulating malware with Dumpulator
• Emotet x64 Stack Strings Config Emulation | OALABS Research
• Native function and Assembly Code Invocation
• Guloader string decryption (VEH)

Examples …

analysis code debugging tools dumpulator dynamic dynamic analysis files general library links malware malware analysis memory progress prototype pull requests requests sandboxing unpacking windows-internals work