A pattern-matching tool by VirusTotal for helping malware researchers identify and classify malware samples.
Open source
6 alternativesManalyze
Manalyze statically analyzes PE executables and collects signals that may indicate malicious behavior.
About Manalyze
Manalyze is an open-source static analysis tool for PE executables. It is used for an initial assessment of one or more executables. It collects weak signals that may indicate malicious behavior and displays information that can support a later manual analysis. It is written in C++ and released under the GPLv3 license.
The tool includes a plugin architecture. The optional VirusTotal plugin can submit file hashes to VirusTotal, which is an external service, and it requires the Boost.System library. Authenticode signature verification works on Windows only. The project provides build instructions for Linux, BSD, Windows, and macOS, prebuilt archives on GitHub Releases, and a community-provided Docker image.
Key features
- Identifies the compiler used to build a PE file
- Detects packed executables
- Applies ClamAV signatures to analyzed files
- Searches files for suspicious strings
- Flags suspicious import combinations, such as WriteProcessMemory with CreateRemoteThread
- Detects cryptographic constants, similar to IDA's findcrypt plugin
Best for: Security analysts and researchers who want a first-pass static review of PE executables before carrying out manual analysis.
Good for
- Open source under the GPLv3 license
- Flexible plugin architecture for in-depth static analysis
- Prebuilt Windows, Linux, and macOS archives are available on GitHub Releases
Watch out for
- It collects weak signals, so its output is not a verdict and needs manual follow-up
- Authenticode signature verification works on Windows only
- The VirusTotal plugin is optional and requires the Boost.System library
Manalyze at a glance
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Platforms
- Linux, Windows
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 6, 2026 · Online when checked
- Listed
- Oct 5, 2026
Manalyze alternatives
Tools and sites you could use instead, ranked by how closely they match.
Grype scans container images and filesystems for vulnerabilities; its repository lists container and security topics.
Open source
5 alternatives
This open-source Windows Forms application uploads files to VirusTotal; the project notes it is not officially supported.
Open source
VirusTotal's vt-cli is a command-line interface for the service, with its repository written in Go.
Open source
Manalyzer statically analyzes PE executable files for undesirable behavior and accepts files or URLs for submission.
Popular in Antivirus & Malware Protection
Well-known listings from the same topic.
Microsoft Safety Scannerlearn.microsoft.com/en-us/defender-endpoint/sa…Sandboxie Plussandboxie-plus.comMalwarebytesmalwarebytes.comANY.RUNany.runSandboxsandbox.pikker.eeID Ransomwareid-ransomware.malwarehunterteam.com
Manalyze FAQ
Can Manalyze be built on a machine without internet access?
Yes. The project describes offline builds, where the Yara and hash-library projects are checked out manually and placed in the external folder before running cmake with the GitHub option set to OFF.
Is there an official Docker image?
The Docker image is provided by the community, not by the project itself. The README gives the command docker pull evanowe/manalyze.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.