Search Results for "pe header"

Detect It Easy (DiE) is a tool for determining the type and internal features of binary and other file formats. It is widely used by malware analysts, digital forensics investigators, reverse engineers, and security researchers to quickly inspect unknown files and infer their type, architecture, compiler/packer used, and internal structure. DiE supports a large variety of file formats — from common executables (Windows PE, Linux ELF, macOS Mach-O) to archives, mobile packages (APK, IPA),...

Il2CppDumper is a Unity IL2CPP reverse engineering tool for analyzing supported Unity applications and game binaries. It can restore DLL metadata structures without restoring original code, which helps researchers inspect classes, methods, fields, MonoBehaviour data, and MonoScript information. The tool supports executable formats such as ELF, ELF64, Mach-O, PE, NSO, and WASM. It supports Unity versions from 5.3 through 2022.2, according to the repository documentation. Il2CppDumper can...

COFFI is a header-only C++ library intended for reading files in the MS Windows PE/PE+ format. The library also supports generic COFF format.

sRDI is a compact project that implements a shellcode form of Reflective DLL Injection, enabling DLLs to be converted into position-independent shellcode and loaded in memory by a small in-process PE loader. The codebase groups a C implementation of a reflective PE loader with multiple loader/wrapper components (native C loader, a .NET loader, Python and PowerShell conversion helpers) so authors can produce and embed sRDI blobs in different environments. The loader aims to behave like a proper PE loader: it preserves section permissions, supports TLS callbacks, performs sanity checks, and exposes flags to control behaviors such as header clearing, memory wiping, import obfuscation, and whether the shellcode receives the base address. ...

...Since v2.01, it will also work with Sven B. Schreiber's ancient WALK32. C header files can be converted to include files for JWasm with h2incX. JWasm's source code is released under the Sybase Open Watcom Public License, which allows free commercial and non-commercial use. There's a bunch of source samples available - they are supplied with the precompiled binary packages.

This tool can help you to modify a PE32 file header

Works directly on the PE header of the dll/exe and changes the debug directory information as needed.

DllChecker 1. is an Application to search and report Product, File version and CPU Type of Dlls and exes. 2. is written in PERL. 3. can report in both pure text as well as html table format. 4. can scan multiple directories recursively.

This is a library for handling the PE Header, Import Table, Export Table and Section Table of the Pe files.It is fully coded in mASM, so it is very fast and really small Supports all versions of Windows.C, VB.Net, VB 6, ASM and more headers included.