-
Hello,
I have build a DLL as a PE32+ executable (64Bit).
With pefile in Python I read the ImageBase with `pe.OPTIONAL_HEADER.ImageBase`. The result in hex format is `0x180000000`.
But when I use a…
-
Hello, can you please aid with the following error?
Traceback (most recent call last):
File "ssma.py", line 141, in
_tls = pe.checkTSL()
File "/home/user/Downloads/SSMA-master/src/check_fi…
-
I noticed during malware analysis that `pefile` could better handle certain cases where the value of `NumberOfRvaAndSizes` has been reduced to hide the .NET directory information from certain parsers.…
-
```
What steps will reproduce the problem?
1. Load example shapefile from
http://gis.stackexchange.com/questions/50264/how-to-get-text-attributes-from-sha
pefile-with-python-pyshp/
2. r = shapefile.R…
-
```
(Originally submitted by https://github.com/Hexadite-Max)
In the "try" statement the call to file(fname, 'rb') may fail to various
reasons, however the exception that it throws gets lost due to …
-
An issue I see with a lot of PE parsers is that section names that go beyond 8 characters aren't supported. Both LLVM and MinGW make use of this feature. What it boils down to is that the section name…
-
Windows verifies the attached sample's signature, however when I use `signify`, I get:
`SignedPEParseError: The PE file does not contain a certificate table.`
Any ideas?
(Attaching as link be…
-
Tests run for about 20 minutes and while normally not an issue it can be annoying under certain conditions.
Some options:
- more caching
- better test case selection (less samples)
- reorder tes…
mr-tz updated
3 months ago
-
An 8-byte, null-padded UTF-8 encoded string. If the string is exactly 8 characters long, there is no terminating null. For longer names, this field contains a slash (/) that is followed by an ASCII re…
-
The Name field contains the RVA to the string but it's not made available in the Python object.