pe-analyzer 开源项目推荐（47 个）

hasherezade /pe-sieve

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcodes, hooks, in-memory patches).

hasherezade /pe-bear

带有友好图形界面的 Portable Executable 逆向工具

hasherezade /pe-bear-old

PE-bear (builds only)

sevaa /dwex

DWARF Explorer - a GUI utility for navigating the DWARF debug information

HoShiMin /formatPE

A bunch of parsers for PE and PDB formats in C++

jovibor /Pepper

PE32 (x86) and PE32+ (x64) binaries analysis tool, resources viewer/extractor.

jovibor /libpe

Library for parsing internal structures of PE32/PE32+ binary files.

jnastarot /furikuri

too busy for that all, furikuri is framework for code protection

adamhlt /PE-Explorer

PE Explorer in C++ (x86 / x64) - PE file parser, retrieve exports and imports

jnastarot /enma_pe

Cross-platform library for parsing and building PE\PE+ formats

password123456 /CertVerify

A scanner that files with compromised or untrusted code signing certificates written in python.

jnastarot /shibari

Library for linking multiple PE\PE + files to one

zaas2 /StudyPE_2026

Modern PE/ARM/.NET analyzer and editor rebuilt with Qt 5.15

ignacioj /WhacAMole

Live memory analysis detecting malware IOCs in processes, modules, handles, tokens, threads, .NET assemblies, memory address space and environment variables. Dumps, detects and dissasemble hooks, shellcode, memory regions, modules and processes.

nurupo /mingw-ldd

Lists dependencies of a PE (exe/dll) file

2M12 /DeNuitkanizator

Nuitka Assembly analyzer (as well as PyInstaller and other packagers) and native exe-files for extracting metadata, strings, modules, and structures from compiled ones.exe files. It is not a decompiler - it does not restore the source code.

deadbits /pe-static

Static file analysis for PE files

xryw32 /pe-x86-parser

this is a small pe64 file analyzer in c++ with winapi, I didn't do it in the best way but hey, it's a small project like that that I thought was nice to do, the program can work in it calling with arguments or executing it as such.

Alex4386-vault /pe-parser

PE/MZ Header Parser :: A crossplatform Windows PE/MS-DOS MZ Header Parser : Powered by @Pay1oad-repo

CloneLTaps /ProcessExplorer

Process Explorer is a tool that lets you inspect PE internals. It also has a built in hex editor that allows you to modify any file before saving it again.