skills.rest
hackersifu
hackersifuCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

re-unpacker

Identify packed samples and generate evidence-based unpacking plans and reports.

33|2|Updated Feb 5, 2026
Search Tags:#evidence#obfuscation#defensive#packing#malware-analysis#unpacking
One-click install
npx skills add https://github.com/hackersifu/reverse-engineering-skills --skill re-unpacker
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: re-unpacker
Source: https://github.com/hackersifu/reverse-engineering-skills/tree/main/.agents/skills/re-unpacker
Command: npx skills add https://github.com/hackersifu/reverse-engineering-skills --skill re-unpacker

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Identify packing/obfuscation indicators and guide a safe, repeatable unpacking workflow to recover a higher-fidelity sample for defensive analysis.

Core Features & Use Cases

  • Static-first packing assessment to determine if a sample is packed or obfuscated and identify evidence signals.
  • Generate an unpacking plan and unpacking report with traceable evidence for incident response and malware triage.
  • Guardrails and safety: require a controlled sandbox and evidence-driven validation before any unpacked artifacts are produced.

Quick Start

Provide a suspected sample in a safe sandbox and the skill will generate a packing assessment, unpacking plan, and report.

Frequently Asked Questions about re-unpacker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify if a malware sample is packed or obfuscated?▼

Packed or obfuscated malware samples are identified through a static-first packing assessment that detects evidence signals within the file to determine if unpacking is necessary for defensive analysis.

What is the best way to unpack malware safely for analysis?▼

The best way to unpack malware safely is to execute an evidence-driven unpacking plan within a controlled sandbox, ensuring traceable validation before generating any unpacked artifacts for analysis.

How does an unpacking report support incident response workflows?▼

An unpacking report supports incident response by providing traceable evidence and a repeatable workflow that documents the static and dynamic steps used to recover the malware sample.

Do I need a controlled sandbox to unpack obfuscated malware?▼

A controlled sandbox is required to unpack obfuscated malware, as strict safety guardrails mandate evidence-driven validation in an isolated environment before any unpacked artifacts are produced.

Can I generate an unpacking plan without dynamic analysis?▼

You can generate an unpacking plan using a static-first approach to assess packing indicators, though optional dynamic steps may be guided within the controlled environment to complete the workflow.

Related Skills

Explore More Data & Analytics Skills→
daymadedaymade
1.3k

repomix-unmixer

Unpack repomix-packed repositories from XML, Markdown, or JSON formats.

Community
Advanced
emilneuraz-aiemilneuraz-ai

memory-forensics

Extract processes, network connections, and artifacts from RAM dumps with Volatility 3.

Community
Advanced
aivos-xieaivos-xie
1

malware-analysis

Execute malware in a sandbox and analyze behavior with YARA rules.

Community
Advanced
YukiIto1999YukiIto1999

analyzing-packed-malware-with-upx-unpacker

Identify UPX-packed malware and restore original executables for static analysis.

Community
Advanced