GitHub - wolfram77web/app-peid: PEiD detects most common …
For example. peid -hard -time -r c:\windows\system32 peid -time -deep c:\windows\system32\*.dll Task Viewing / Control Module ----- You can scan currently running tasks with PEiD. The files are scanned from memory. Processes can also be terminated. You can also optionally dump a module and scan the dumped image.
GitHub - packing-box/peid: Python implementation of the Packed ...
This tool is an implementation in Python of the Packed Executable iDentifier (PEiD) in the scope of packing detection for Windows PE files based on signatures. It uses a combination of more than 5.500 signatures merged from the following sources: The main tool checks the input executable against the embedded or user-defined signatures database.
horsicq/Detect-It-Easy - GitHub
Detect It Easy, or abbreviated "DIE" is a program for determining types of files. DIE is a cross-platform application, apart from Windows version there are also available versions for Linux and Mac OS. Many programs of the kind (PEID, PE tools) allow to …
compile - Detect compiler used for EXE file - Super User
Jul 11, 2014 · 12. PEiD detects most common packers, cryptors and compilers for PE files. It can currently detect more than 600 different signatures in PE files. PEiD is special in some aspects when compared to other identifiers already out there! It has a superb GUI and the interface is really intuitive and simple. Detection rates are amongst the best given ...
Releases · K-atc/PEiD - GitHub
Yet another implementation of PEiD with yara. Contribute to K-atc/PEiD development by creating an account on GitHub.
Portable Executable reversing tool with a friendly GUI - GitHub
Oct 17, 2022 · PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files. Signatures for PE-bear: SIG.txt (updated: Oct 17, 2022) - contains signatures from PEid's UserDB - converted by a script provided by crashish.
peid/README.md at main · packing-box/peid · GitHub
This tool is an implementation in Python of the Packed Executable iDentifier (PEiD) in the scope of packing detection for Windows PE files based on signatures. It uses a combination of more than 5.500 signatures merged from the following sources: The main tool checks the input executable against the embedded or user-defined signatures database.
GitHub - rednaga/APKiD: Android Application Identifier for …
It identifies many compilers, packers, obfuscators, and other weird stuff. It's PEiD for Android. For more information on what this tool can be used for, check out: Android Compiler Fingerprinting; Detecting Pirated and Malicious Android Apps with APKiD; APKiD: PEiD for Android Apps (BlackHat EU/UK Arsenal 2018)
packing-box/pypackerdetect: Packing detection tool for PE files
Detect packers on PE files using heuristics and signatures. A complete refactoring of this project to a Python package with a console script to detect whether an executable is packed. pefile is used for PE parsing. peid is used as implementation of PEiD. $ pip install pypackerdetect. $ pypackerdetect --help.
K-atc/PEiD: Yet another implementation of PEiD with yara - GitHub
Features. don't need to install yara and download yara rules. support multiple file types: PE, Malicious Documents, etc. multi platform support: Linux, Windows. analyze outputs of yara (see following output)
- Some results have been removed