Flag: Tornado! Hurricane!

Blogs >> hasherezade's Blog

Created: Tuesday, July 9 2013 09:54.39 CDT Modified: Saturday, August 17 2013 07:30.46 CDT
Printer Friendly ...
PE-bear - a new PE files reversing tool
Author: hasherezade # Views: 34409

Hi! Today I would like to introduce my new project � PE-bear. In short words � it is a viewer/editor for PE32 and PE64 files. You may ask � why the hell another PE reversing tool? Well, I started developing it just for myself and for my friends, involved in malware analysis � due to the fact that existing tools were not matching all our needs. The tool grown, so now I decided to share it with the world, with the hope (but no warranty) that You also will find it useful.
The latest version is 0.2.0 (beta)

More details you can find here:

PE-bear

Special thanks goes to Sfires, for hosting the project and supporting the full development process.

Features:
- handles PE32 and PE64
- views multiple files in parallel
- recognizes known packers (by signatures)
- fast disassembler � starting from any chosen RVA/File offset
- visualization of sections layout
- selective comparing of two chosen PE files
- integration with explorer menu
- and more�




Add New Comment
Comment:









There are 31,325 total registered users.


Recently Created Topics
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23
Oct/23


Recent Forum Posts
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
Reverse Engineering ...
bytecod3r
let 'IDAPython' impo...
bytecod3r
Reverse Engineering ...
bytecod3r
Finding the procedur...
rolEYder
Question about debbu...
rolEYder
Identify RVA data in...
sohlow


Recent Blog Entries
halsten
Mar/14
Breaking IonCUBE VM

oleavr
Oct/24
Anatomy of a code tracer

hasherezade
Sep/24
IAT Patcher - new tool for ...

oleavr
Aug/27
CryptoShark: code tracer ba...

oleavr
Jun/25
Build a debugger in 5 minutes

More ...


Recent Blog Comments
nieo on:
Mar/22
IAT Patcher - new tool for ...

djnemo on:
Nov/17
Kernel debugger vs user mod...

acel on:
Nov/14
Kernel debugger vs user mod...

pedram on:
Dec/21
frida.github.io: scriptable...

capadleman on:
Jun/19
Using NtCreateThreadEx for ...

More ...


Imagery
SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit