Also, you can enable logging, and change skin and language. You can select an EXE or DLL using the file browser or by just dragging and dropping it on to the program window.įrom the program options, you can enable Exeinfo PE to perform a fast scan, ignore EXE errors, integrate into the shell, always be on top and make the interface bigger. It has got lot of other features as well.
Along with the packer details, it shows you information such as the entry point, file offset, linker information, file size, EP section, first bytes, sub-system and overlay of an executable file. It supports shell integration, command line input, and you can even pin it on top of all other applications.Įxeinfo PE is a more advanced program than PEiD. It can also perform recursive directory scanning for multiple files. You can select an EXE file using the file browser or the “drag and drop” method. Hardcore Mode: This does a complete scan of the entire PE file for documented signatures.Deep Mode: Scans the Entry Point containing section for all the documented signature.Normal Mode: Scans PE files at their Entry Point for documented signatures.PEiD has a simple, standard interface where it shows you the EXE packer name, entry point, file offset, linker information, EP section, first bytes, and subsystem information on the selected file. It detects over 600 different signatures in PE files. This is the most well known and widely used tool for detecting packers, cryptors and compilers for PE files. So here are some free, portable tools that can help you in identifying an executable file packer: You may need to do it for reverse engineering or analysis of a malicious code. Identifying an EXE packer is a key part of software analysis.
0 kommentar(er)
