Skip to main content

Python PE parsing module

Project description

pefile, Portable Executable reader module

All the PE file basic structures are available with their default names as attributes of the instance returned.

Processed elements such as the import table are made available with lowercase names, to differentiate them from the upper case basic structure names.

pefile has been tested against many edge cases such as corrupted and malformed PEs as well as malware, which often attempts to abuse the format way beyond its standard use. To the best of my knowledge most of the abuse is handled gracefully.

Copyright (c) 2005-2021 Ero Carrera <ero.carrera@gmail.com>

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

pefile-2021.9.3.tar.gz (72.2 kB view details)

Uploaded Source

File details

Details for the file pefile-2021.9.3.tar.gz.

File metadata

  • Download URL: pefile-2021.9.3.tar.gz
  • Upload date:
  • Size: 72.2 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/3.4.1 importlib_metadata/4.0.1 pkginfo/1.7.0 requests/2.25.1 requests-toolbelt/0.9.1 tqdm/4.56.0 CPython/3.9.6

File hashes

Hashes for pefile-2021.9.3.tar.gz
Algorithm Hash digest
SHA256 344a49e40a94e10849f0fe34dddc80f773a12b40675bf2f7be4b8be578bdd94a
MD5 47969d5c421429cf9dc09a023547b621
BLAKE2b-256 eee1a7bd302cf5f74547431b4e9b206dbef782d112df6b531f193bb4a29fb1b9

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page