CAPY: Streamlining Static Malware Analysis With Behavioural Analysis

A crucial step in cybersecurity is malware analysis, which frequently necessitates analysts to manually switch between several tools in order to learn more about questionable files. The efficiency of threat response is decreased by this lengthy and disjointed process. We are creating CAPY, a static malware analysis tool that combines key analysis methods, to fill this gap. File fingerprinting (hashing, metadata extraction), PE structure parsing (imports, sections, compile time, architecture), string and IOC discovery, and YARA rule matching are all automated by CAPY. Faster triage and decision-making are made possible by the tool's ability to generate structured reports in JSON/html format. CAPY reduces analyst effort by combining several common analysis checks into a single, lightweight, extensible framework. It also provides a basis for future extensions into hybrid analysis with simple dynamic checks.