Name		Name	Last commit message	Last commit date
README.md		README.md
base64_decoder.py		base64_decoder.py
clean_sample.txt		clean_sample.txt
entropy_analyzer.py		entropy_analyzer.py
file_static_analysis.py.py		file_static_analysis.py.py
gui.py		gui.py
low_risk_file.txt		low_risk_file.txt
malicious_javascript.js		malicious_javascript.js
malicious_powershell.ps1		malicious_powershell.ps1
malicious_python.py		malicious_python.py
malicious_script.bat		malicious_script.bat
malicious_vbscript.vbs		malicious_vbscript.vbs
malware_rules.yar		malware_rules.yar
report_generator.py		report_generator.py
requirements.txt		requirements.txt
sample_encoded.exe		sample_encoded.exe
scorer.py		scorer.py
string_metadata_analyzer.py		string_metadata_analyzer.py
yara_scanner.py		yara_scanner.py

Repository files navigation

YARA-Strings-Metadata-Static-Malware-Analyzer-Tool

A Python-based static malware analysis tool using YARA rules, entropy analysis, and Base64 decoding with GUI and PDF report generation.

Features

YARA rule scanning with MITRE ATT&CK mapping
String & metadata extraction
Shannon entropy calculation
Base64 hidden payload detection
Weighted threat scoring (0-100)
Professional GUI with 5 analysis tabs
PDF report export

Risk Levels

| Score | Level | | 0-20 | Clean | | 21-50 | Suspicious | | 51-75 | Likely Malicious | | 76-100 | Malicious |

Installation

pip install customtkinter yara-python pillow reportlab

Usage

python gui.py

Project Structure

| File | Purpose | | gui.py | Main GUI application | | yara_scanner.py | YARA rule matching | | string_metadata_analyzer.py | String & metadata analysis | | scorer.py | Threat scoring engine | | entropy_analyzer.py | Entropy calculation | | base64_decoder.py | Base64 payload decoder | | report_generator.py | PDF report generator |

Tech Stack

Python · YARA · CustomTkinter · ReportLab · RegEx · Hashlib

Note

This tool is for educational and research purposes only. All sample files are simulated — not real malware.

About

A Python-based static malware analysis tool using YARA rules, entropy analysis, and Base64 decoding with GUI and PDF report generation.

1 star

0 watching

Report repository

Releases

Packages

Contributors

Languages