nelj14/themida-dumper

Generic Themida/WinLicense payload extractor. Launches protected PE as suspended process, detects section decryption, dumps unpacked binary with fixed headers, and scans process memory for IOCs. Supports EXE and DLL targets (x86/x64).

语言：C · GitHub 星标：40 · Fork：10

话题：anti-tamper · dumper · malware-analysis · pe-dumper · reverse-engineering · security-tools · themida · unpacker

在 GitHub 上查看原仓库