UNPACME is an automated malware unpacking service. Submissions to UNPACME are analyzed using a set of custom unpacking processes maintained by OpenAnalysis. These processes extract all encrypted or packed payloads from the submission and return a unique set of payloads to the user. In short, UNPACME automates the first step in your malware analysis process.

What We Unpack

UNPACME will only extract packed or encrypted Windows Portable Executable (PE) files that are embedded in the submission. Our unpacking services do not allow the submissions to make network connections, we do not download second stage payloads for droppers or downloaders.

We are continuously developing and expanding our suite of unpacking processes to address new and complex packing techniques. For a full description of our approach, please refer to our Unpacking Documentation.

Free to Use

UNPACME free for non-commercial use in accordance with our Terms of Service.

All free accounts are rate limited and have a restricted maximum number of submissions each month. For access to a higher submission limit, and commercial use, please see our available Plans and Pricing.

API Access

The UNPACME website is a front end for our unpacking services. We also provide direct API access to our services with on-demand scalability. Documentation for our API can be found here.