endgameinc/binarypig

Add modules/scripts for PEV

Opened this issue · 0 comments

jatrost commented

https://github.com/merces/pev

We should create modules/scripts that use any of these tools that make sense based on what we're currently lacking.

PEV includes these tools:

  • pehash - calculate PE file hashes
  • pedis - PE disassembler
  • pepack - packer detector
  • pescan - search for suspicious things in PE files, including TLS callbacks
  • pesec - check security features in PE files
  • pestr - search for unicode and ascii strings in PE files
  • readpe - show PE file headers, sections and more
  • rva2ofs - convert RVA to raw file offsets
  • ofs2rva - convert raw file offsets to RVA