m4b / goblin

An impish, cross-platform binary parsing crate, written in Rust
MIT License
1.17k stars 156 forks source link

feature (PE): add rich header #400

Open JohnScience opened 4 months ago

JohnScience commented 4 months ago

More about rich header: https://bytepointer.com/articles/the_microsoft_rich_header.htm.

Algorithm for parsing: https://0xrick.github.io/win-internals/pe3/#rich-header

Absence of rich header parsing for me is a non-issue but may be useful for those who do cybersecurity and malware analysis.