01
native language
Rust Windows Malware
Native Windows PE samples with high-confidence Rust compiler and runtime artifacts.
root@orderofsixangles:~$ ./open_corpus --scope windows-pe
controlled research corpus
Malware Sample
Collections
Purpose-built Windows PE sets for reverse engineering, detector validation and malware-analysis education. Every file is hash-verified and assigned to exactly one collection.
index / 2026.08
Choose a signal
50 samples per set · SHA-256 named · R2 delivery
02
native language
Go Windows Malware
Go-compiled Windows executables confirmed through readable build metadata and runtime structures.
03
managed code
Managed .NET Samples
Managed Windows malware selected through structural CLR metadata in the PE optional header.
04
packing
Packed & Protected
Samples carrying recognizable packer or commercial protector section signatures.
05
obfuscation
Strongly Obfuscated
PE files selected from multiple independent entropy, import, string, section and entry-point signals.
06
virtualization
Obfuscated Functions
A balanced set protected by VMProtect, Themida, WinLicense, Secure VMP, VProtect or Enigma.
07
execution chain
Loaders, Droppers & Injectors
Samples with direct remote-memory, thread, APC, process-hollowing or context-manipulation capabilities.
08
collection
Credential Theft & Stealers
Credential-focused PE files targeting DPAPI, browser databases, LSASS or keyboard input.
09
command & control
RATs, Backdoors & C2
Remote-access samples combining network communication with command execution and control artifacts.
10
impact
Ransomware & Destructive
File-impacting samples combining enumeration, modification and encryption with recovery inhibition.
11
kernel
Windows Kernel Drivers
Native-subsystem PE drivers with structural kernel characteristics and kernel import evidence.
01Static triageStructure and capability evidence
02IntegrityVerified SHA-256 manifests
03IsolationPassword-protected archives
04Controlled deliveryPrivate R2 behind a quota gate