Malduck

Latest version: v4.4.1

Safety actively analyzes 681812 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 1 of 5

4.4.1

Bugfixes:

* Fix dnpe and procmemelf typing and dependencies (by msm-cert in https://github.com/CERT-Polska/malduck/pull/120)
* extractor: iterate over carved binaries instead of collecting all at once to avoid excessive memory usage (by psrok1 in https://github.com/CERT-Polska/malduck/pull/121)

**Full Changelog**: https://github.com/CERT-Polska/malduck/compare/v4.4.0...v4.4.1

4.4.0

New features and improvements:
- Make it possible to specify a base when rebuilding the PE (by msm-code in https://github.com/CERT-Polska/malduck/pull/107)

Bugfixes:

- Fixed issues in malduck.extractor with extracting configuration from binaries that are not at the beginning of the memory dump (by psrok1 in https://github.com/CERT-Polska/malduck/pull/100)
- Include image=True binaries in load_binaries_from_memory (by psrok1 in https://github.com/CERT-Polska/malduck/pull/108)

**Full Changelog**: https://github.com/CERT-Polska/malduck/compare/v4.3.2...v4.4.0

4.3.2

Bugfixes:

- Fixed compatibility with yara-python >=v4.3.0 (https://github.com/CERT-Polska/malduck/pull/94)
- Removed strict pin from dnfile dependency (https://github.com/CERT-Polska/malduck/pull/93)
- `malduck.ints` should work a bit faster, it appears that `typing.cast` doesn't come without cost (https://github.com/CERT-Polska/malduck/pull/95)

4.3.1

Bugfixes:
- malduck doesn't work with yara-python 4.3.0. This version is strictly pinned to 4.2.3 (https://github.com/CERT-Polska/malduck/pull/86, thanks yankovs for PR!)

Other changes:
- Minimum required Python version is 3.8 instead of 3.6. Currently malduck doesn't contain code that is incompatible with Py<3.8 but due to incoming EOL of Python 3.7 it may change in future.

4.3.0

New features and improvements:

- ProcessMemory model for .NET (procmemdnpe) (https://github.com/CERT-Polska/malduck/pull/74, thanks W3ndige!)
- ECB mode for DES3 (https://github.com/CERT-Polska/malduck/pull/76)
- Bumped `pefile >= 2022.5.30` and removed `FastPE` patch for `pefile.PE` (https://github.com/CERT-Polska/malduck/pull/80)
- Added missing fixed argument for multiplied ints (https://github.com/CERT-Polska/malduck/pull/77)
- Additional warnings when extractor module is incorrect e.g. empty due to missing `__init__.py` (https://github.com/CERT-Polska/malduck/pull/75)

4.2.0

New features and improvements:
- CLI: Added resource extraction from PE files (https://github.com/CERT-Polska/malduck/pull/67)

Bugfixes:
- Fixed Bigint.pack for odd-length hex integers (https://github.com/CERT-Polska/malduck/pull/58, thanks yunzheng!)
- Fixed APLib decompression (https://github.com/CERT-Polska/malduck/pull/64, thanks sisoma2!)

Page 1 of 5

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.