aboutsummaryrefslogtreecommitdiff
path: root/python/pefile/README
blob: acb68d598f24c5cc95b2293134e7f47a1d5be488 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
pefile is a Python Portable Executable (PE) reader module.

pefile is a multi-platform Python module to read and work with Portable
Executable (aka PE) files. Most of the information in the PE Header is
accessible, as well as all the sections, section's information and data.
pefile requires some basic understanding of the layout of a PE file. Armed
with it it's possible to explore nearly every single feature of the file.
Some of the tasks that pefile makes possible are:

    Modifying and writing back to the PE image
    Header Inspection
    Sections analysis
    Retrieving data
    Warnings for suspicious and malformed values
    Packer detection with PEiD's signatures
    PEiD signature generation