PE-bear - a new PE files reversing tool
 h-Ash (hasherezade) <hasherezade op pl> |
Tuesday, July 9 2013 09:54.39 CDT |
Hi! Today I would like to introduce my new project � PE-bear. In short words � it is a viewer/editor for PE32 and PE64 files. You may ask � why the hell another PE reversing tool? Well, I started developing it just for myself and for my friends, involved in malware analysis � due to the fact that existing tools were not matching all our needs. The tool grown, so now I decided to share it with the world, with the hope (but no warranty) that You also will find it useful.
The latest version is 0.2.0 (beta)
More details you can find here:
PE-bear
Special thanks goes to Sfires, for hosting the project and supporting the full development process.
Features:
- handles PE32 and PE64
- views multiple files in parallel
- recognizes known packers (by signatures)
- fast disassembler � starting from any chosen RVA/File offset
- visualization of sections layout
- selective comparing of two chosen PE files
- integration with explorer menu
- and more�
Comments
| Posted: Wednesday, December 31 1969 18:00.00 CST | |