Projects & Case Studies
Deep-dives into the projects of Petre Radu Cătălin - tools for malware analysis, forensic research, and the automation that makes penetration testing at NTT DATA faster and more repeatable.
MalwarePeek
PE File Analyzer for Static Malware Analysis
MalwarePeek is a Python-based portable executable analyzer built for malware analysts and reverse engineers. It parses PE headers, fingerprints packers, and scans samples against YARA rules - then generates clean HTML reports for triage.
Highlights
- Deep PE header parsing: DOS, NT, optional header, sections, imports & exports.
- Packer detection heuristics for UPX, Themida, ASPack and others.
- YARA rule scanning with embedded rule packs.
- Self-contained HTML report generation for distribution to analysts.
Signature Stealer
Educational PoC - Authenticode Signature Extraction
A focused educational proof-of-concept that inspects authenticated code-signing metadata inside signed PE files. It demonstrates how signature blocks remain queryable and how tooling can surface embedded certificate chains for forensic review.
Highlights
- Extracts Authenticode signature metadata from signed binaries.
- Parses embedded certificate chains and signing timestamps.
- Purpose-built for education: shows why signature metadata is not trust.
- Small, dependency-light codebase, easy to audit.
Repo private - capabilities onlyCustom Pentest Automation Toolkit
Recon & Vulnerability-Scanning Automation
An internal toolkit of Python and Bash scripts that automate reconnaissance, endpoint enumeration and vulnerability scanning. Used to deliver faster, repeatable assessments and cut end-to-end testing time by roughly 30% at NTT DATA.
Highlights
- Automated subdomain enumeration and service fingerprinting.
- Parallelized scanning orchestration across internal tooling.
- Structured, timestamped report output for client deliverables.
- Reproducible playbooks for repeat assessments.