LogoopenSUSE Build Service > Projects
Sign Up | Log In

Python module to read and work with PE (Portable Executable) files

pefile is a multi-platform Python module to read and work with Portable Executable (aka PE) files. Most of the information in the PE Header is accessible, as well as all the sections, section's information and data.

pefile requires some basic understanding of the layout of a PE file. Armed with it it's possible to explore nearly every single feature of the file.

Some of the tasks that pefile makes possible are:

    Modifying and writing back to the PE image
    Header Inspection
    Sections analysis
    Retrieving data
    Warnings for suspicious and malformed values
    Packer detection with PEiD's signatures
    PEiD signature generation 

Source Files

Filename Size Changed Actions
UserDB.TXT 488 KB Download File
force_version.patch 698 Bytes Download File
pefile-1.2.10-139.tar.gz 55.5 KB Download File
python-pefile.changes 1.35 KB Download File
python-pefile.spec 1.98 KB Download File

Comments for home:gregfreemyer:Tools-for-forensic-boot-cd (0)

Login required, please login or signup in order to comment