PE-bear is a freeware reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files.
Signatures for PE-bear:
- SIG.txt (updated: 22.01.2014) - contains signatures from PEid's UserDB - converted by a script provided by crashish
Use recursive clone to get the repo together with the submodule:
git clone --recursive https://github.com/hasherezade/pe-bear.git
Download the latest release.
Available also via Chocolatey