EMBER2024-capa: Malware Capability Annotations from Capa Tool

Capa is a malware analysis tool that identifies a file's capabilities. This dataset, created by user joyce8, contains annotations of malware capabilities such as anti-VM strings and XOR encoding. It was last updated on Hugging Face in August 2025.

Use Cases

• Train malware classification models based on identified capabilities like anti-analysis techniques.
• Analyze the prevalence of specific malware behaviors, such as data encoding via XOR.
• Benchmark the performance of malware analysis tools against the annotated capabilities.
• Develop feature sets for static malware analysis based on the tool's output.

Strengths

• Focuses on a specific, widely-used malware analysis tool (Capa).
• Last update timestamp (2025-08-24 15:55:06) is provided.

Limitations

• Description metadata is limited; actual data quality requires manual inspection after download.
• Column-level documentation is absent; field semantics must be inferred after download.
• Row count is unknown, which may limit suitability assessment.

Provenance

Source

huggingface

Collection Method

Annotations generated by the Capa malware analysis tool.

Freshness

Last updated 2025-08-24 15:55:06