A modular, Python-based Windows security application combining signature detection, heuristics, and structural analysis.
Zecure is a sophisticated, modular security application built in Python. It delivers a multi-layered defense system by combining traditional signature-based detection with modern heuristic and structural analysis techniques.
Designed for performance and extensibility, Zecure demonstrates how modern antivirus solutions operate under the hood.
- Monitors filesystem activity in real-time
- Detects file creation and modification instantly
- Powered by the
watchdogengine
- Fast SHA-256 hashing
- Matches files against a known threat database
- Detects high-entropy files (e.g., packed/encrypted malware)
- Useful for identifying ransomware and obfuscation
- Analyzes EXE/DLL structure
- Detects:
- Suspicious API imports (e.g.,
CreateRemoteThread) - Packing signatures (e.g., UPX)
- Suspicious API imports (e.g.,
- Built with CustomTkinter
- Dark mode interface
- Live activity logs
- Smooth, asynchronous scanning
- Multi-threaded scanning engine
- Thread-safe queues
- Prevents UI freezing during scans
- Automatically installs missing libraries at runtime:
customtkinterpefilepsutilwatchdog
- Python 3.9+
- Windows OS (recommended for PE analysis features)
pip(Python package manager)