Python PE parsing module
Project description
pefile, Portable Executable reader module
All the PE file basic structures are available with their default names as attributes of the instance returned.
Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names.
pefile has been tested against many edge cases such as corrupted and malformed PEs as well as malware, which often attempts to abuse the format way beyond its standard use. To the best of my knowledge most of the abuse is handled gracefully.
Copyright (c) 2005-2021 Ero Carrera <ero.carrera@gmail.com>
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
File details
Details for the file pefile-2021.5.24.tar.gz.
File metadata
- Download URL: pefile-2021.5.24.tar.gz
- Upload date:
- Size: 66.1 kB
- Tags: Source
- Uploaded using Trusted Publishing? No
- Uploaded via: twine/3.4.1 importlib_metadata/4.0.1 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.56.0 CPython/3.9.5
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 | ed79b2353daa58421459abf4d685953bde0adf9f6e188944f97ba9795f100246 |
|
| MD5 | 3124186a88faf518a8e5243787bde669 |
|
| BLAKE2b-256 | dc8e99fde2fe50afebbb1ef6f46508203e66e45c6e3966caacd219152c8a52e1 |
