packing-box / peid

Python implementation of the Packed Executable iDentifier (PEiD)
GNU General Public License v3.0
127 stars 14 forks source link

In-memory scanning #2

Open tominovoj opened 9 months ago

tominovoj commented 9 months ago

Hello,

would it be possible to implement in-memory (binary file) scanning option?

dhondta commented 9 months ago

Hi @tominovoj ! This is basically a static tool. No plan to include dynamic signature matching.

LordNoteworthy commented 8 months ago

Apologies if I am commenting on a closed issue. I believe @dhondta meant to allow identify_packer() API to take an byte array.

Having a quick look into the code, it appears you allow only file paths.

dhondta commented 8 months ago

@LordNoteworthy Hi ! Good remark, I did not understand it this way. I will look into this in the coming days.