Python module for viewing Portable Executable (PE) files in a tree-view using pefile and PyQt5. Can also be used with IDA Pro and Rekall to dump in-memory PE files and reconstruct imports.
Apache License 2.0
1.3k
stars
170
forks
source link
Fails to process certificates from IMAGE_DIRECTORY_ENTRY_SECURITY #4
Fails to parse certificates from properly signed PE files due to an issue in reading the overlay. Will be fixed in the next version.