yara rules applied

detect_packer_cryptor.py

import yara

#Path to the folder containing downloaded files in the first part
rules_path = 'path/to/the/folder/containing/downloaded/rules'

#Read files
peid_rules = yara.compile(rules_path + 'peid.yar')
packer_rules = yara.compile(rules_path + 'packer.yar')
crypto_rules = yara.compile(rules_path + 'crypto.yar')

#Path to the exe file you want to analyze
exe_file_path = 'path/to/exe/file'

#Now we will try to find out if yara rules match with the exe
#file, if so that means that yara has detected a packer or a cryptor
#first we try to detect cryptors

try:
  #the function match will return the list of detected cryptors
  matches = crypto_rules.match(exe_file_path)
  if matches:
    print('Cryptors detected')
    print(matches)
except:
  #I always add this exception thing, because I don't know what could happen
  print('cryptor exception, you must read yara docs')
  
#detect packers

try:
  matches = packer_rules.match(exe_file_path)
  if matches:
    print('packers detected')
    print(matches)
except:
  print('packer exception, you must read yara docs')