Get the software

Download the latest version of Malcat

Malcat is currently in beta phase. It means that while the software is finished and polished, it has not been tested extensively by its user base and documentation is kind of sparse. The good news is that Malcat is 50% off during this period.

Malcat Lite

The Lite Edition is completey free and contains most of Malcat's features, with a few limitations:

  • Hexadecimal/structure editor
  • 30+ file formats
  • Navigate through embedded objects
  • Identify strings and symbols
  • Decrypt/decompress data in-place
  • Constants highlighting
  • Yara scanner + editor
  • Python scripting
  • x86/x64 disassembly
  • Default theme only
  • Single-threaded analysis
Beside these limitations, please not that the lite edition cannot be used in a professional environment.

Full & Professional

The full version of Malcat comes with all features, free updates for one year and allows installation on up to three machines for one user:

  • Hexadecimal/structure editor
  • 30+ file formats
  • Navigate through embedded objects
  • Identify strings and symbols
  • Decrypt/decompress data in-place
  • Constants highlighting
  • Yara scanner + editor
  • Python scripting
  • x86/x64, .NET, python, VB and NSIS disassembly
  • Multiple visual themes
  • Multi-threaded analysis (~x2 speedup)
  • Sleigh decompiler (x86/x64)
  • Script decompiler (AutoIT, VBA, Excel macros)
  • Diff engine
  • Anomaly scanner
  • Use in a professional environment PRO
  • Support (best effort basis) PRO
The professional edition additionally comes with best-effort support and allows commercial use. Commercial use means use in a professional environment or in any activity that directly or indirectly generates revenues.

Installation notes

Malcat comes as a portable ZIP archive that you may decompress wherever you want. Since there is no installer, you may want to add the executable to your PATH or create a shortcut yourself.

Windows

Malcat can run on Windows 10 64bits. It should also run fine on Windows 7 64bits (with the latest updates installed) and Windows 11 64bits, but no testing is performed for these platforms. If you have a doubt, test with the lite edition first. Note that you will need to have the VS2015 64bits redistributables installed on your system. You can download them on the Microsoft Download Center if needed.

On Windows, Malcat comes bundled with a python 3 interpreter. You may chose to use your python system installation instead, but you will have to make sure to have the same version installed (python 3.8 x64).

Linux

Malcat has been built for some of the most widely spread Linux distributions out there. After unzipping the archive, you will need to install the following packages from your distribution repository:

  • GTK 3
  • Python 3
  • A few python packages (see INSTALL.txt)

If your distribution is not listed there, you can still try one of the portable packages depending on your python version:

  • Python 3.9 -> Debian 11
  • Python 3.8 -> Ubuntu 20.04
  • Python 3.7 -> Debian 10
  • Python 3.6 -> Ubuntu 18.04

And if it still does not work (and there is enough demand) we may consider distributing the application as a Flatpak packet, but you may have to endure slower cold starts and subpar desktop theme support.

Also a quick note regarding HiDPI: Linux HiDPI support is terrible. And Malcat uses wxWidgets, which somehow makes things harder since some controls are native, and some are not. We have tried to make Malcat compatible with most HiDPI settings, but a few controls may be to small/big, in particular if you have fractional scaling. If you have a doubt, test with the lite edition first.

MacOS

There is no MacOS version of Malcat. While there is no technical constraint that forbids Malcat from being compiled for this platform, we have no experience developing for MacOS. In the very unlikely event that the sales go very very well and we can afford one of these shiny computers, who knows, but don't hold your breath.


*: Additional taxes may be added in some regions and are calculated automatically during checkout by our payment provider.