Python module to read and work with PE (Portable Executable) files
pefile is a multi-platform Python module to read and work with Portable Executable (aka PE) files. Most of the information in the PE Header is accessible, as well as all the sections, section's information and data.
pefile requires some basic understanding of the layout of a PE file. Armed with it it's possible to explore nearly every single feature of the file.
Some of the tasks that pefile makes possible are:
Modifying and writing back to the PE image
Header Inspection
Sections analysis
Retrieving data
Warnings for suspicious and malformed values
Packer detection with PEiD's signatures
PEiD signature generation
- Developed at devel:languages:python
- Sources inherited from project openSUSE:Factory
-
4
derived packages
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout openSUSE:Factory:Rebuild/python-pefile && cd $_ - Create Badge
Refresh
Refresh
Source Files
| Filename | Size | Changed |
|---|---|---|
| pefile-2022.5.30.tar.gz | 0000072889 71.2 KB | |
| python-pefile.changes | 0000003361 3.28 KB | |
| python-pefile.spec | 0000002465 2.41 KB |
Revision 6 (latest revision is 10)
Dominique Leuenberger (dimstar_suse)
accepted
request 981054
from
Greg Freemyer (gregfreemyer)
(revision 6)
- update to version 2022.5.30 * Merged pull request #344 from elicn/faster-reloc: Speed up relocation process * Merged pull request #175 from tdube/patch-1: Fix catch-all exception clause in parse_resources_directory * Turn data into a bytearray to avoid copying data around (from elicn) * Merged pull request #343 from mat-gas/master: various performances improvements (30-50% in certain workflows, 15-25% in average) * Merged pull request #340 from dinateper/feature/PEfile_context_manager: Update PE to allow with statements * Removed legacy Python 2 code * Miscellaneous other fixes. - add %define skip_python2 1
Comments 0