PEiD
Website:
here∞
Download:
here∞
PEiD is a PE file iDentifier. That is to say it can identify (hundreds of) packers/protectors/crypto techniques in a given executable file.
PEiD also has the ability to function via plugins which allow for specific tasks like unpacking a specific packing scheme (although it comes, by default, with a generic unpacker).
The program also has various disassembly tools and tools to view information from the PE header of any given file.
From the PEiD site:
PEiD detects most common packers, cryptors and compilers for PE files. It can currently detect more than 470 different signatures in PE files.
PEiD is special in some aspects when compared to other identifiers already out there!
1. It has a superb GUI and the interface is really intuitive and simple.
2. Detection rates are amongst the best given by any other identifier.
3. Special scanning modes for *advanced* detections of modified and unknown files.
4. Shell integration, Command line support, Always on top and Drag'n'Drop capabilities.
5. Multiple file and directory scanning with recursion.
6. Task viewer and controller.
7. Plugin Interface with plugins like Generic OEP Finder and Krypto ANALyzer.
8. Extra scanning techniques used for even better detections.
9. Heuristic Scanning options.
10. New PE details, Imports, Exports and TLS viewers
11. New built in quick disassembler.
12. New built in hex viewer.
13. External signature interface which can be updated by the user.
|
|
Attachment
|
Size
|
Date Added
|
|
|
PEiD.zip
|
313.7 KB
|
9/16/2005 6:07 am
|
| |
Categories
CategoryDefinitions
There are no comments on this page. [Add comment]