pe bear

We have hosted the application pe bear in order to run this application in our online workstations with Wine or directly.

Quick description about pe bear:

PE-bear is a multiplatform reversing tool for inspecting Windows Portable Executable files. It is designed to give malware analysts and reverse engineers a fast first view of a PE file’s structure. The tool can handle malformed PE files, which is important when analyzing packed, damaged, or intentionally manipulated binaries. It provides a graphical interface for exploring headers, sections, imports, resources, strings, and other PE internals. PE-bear also includes analysis conveniences such as hashes, signatures, and searchable string views. It is useful for security researchers who need a flexible PE inspection tool before moving into deeper disassembly or dynamic analysis.

Features:

• Portable Executable file inspection
• Multiplatform reversing interface
• Malformed PE file handling
• Headers, sections, and imports view
• String and resource analysis
• Useful first-look malware triage

Programming Language: C++.
Categories: