About PyMal PyMal is a python based interactive Malware Analysis Framework. It is built on the top of three pure python programes Pefile, Pydbg and Volatility. The main aim of the project is to combine all the Malware Analysis related tools into a single interface for rapid analysis.

PyMal have several wrapper functions to manipulate Executable as well as running Processes. It also offers some advanced features like

Injected Code Detection Hook Detection using Passive Image Referencing For detailed view of the features and working, please check out the demonstration video shown below.

It works on all platforms starting from Windows XP to Windows 8.

Requirements You must have latest version (v2.6 or higher) of Python on your system.

Installation Make sure you have Python (v2.6 or higher) installed on your system.

Then follow the simple steps below for quick installation After download, extract PyMal.zip on your local disk. Copy the content of 'site-packages' folder into your Python installation 'site-packages' directory For more details watch the demonstration video shown below.

How to Use? PyMal is very simple and easy to use.

Here are the simple usage details After the installation, run the PyMal by clicking on the 'pymal.py' file This will launch the PyMal shell as shown in the screenshot & video below All the PyMal functions can be accessed through "pm" object of PyMal class. It also support TAB completion of the commands. For more details follow the video below https://vimeo.com/67400713

PyMal

Install / Use

README