GitHub - cysinfo/Exescan: ExeScan is the FREE console based tool to detect anomalies in PE (Portable Executable) files. It quickly scans given executable file and detect all kind of anomalies in its PE header fields including checksum verifications, size of various header fields, improper size of raw data, non-ascii/empty section names etc. Various packers/protectors modify PE header to make reversing harder. Sometimes anomalies in PE header may crash Debugging tools thereby blocking your attempt to reversing. Such anomalies can also make some of the GUI based PE analysis tools to fail to parse PE headers. In such cases ExeScan can come handy by helping you to quickly detect such anomalies. Then you can fix them and proceed to further analysis of malware. In addition to finding various anomalies, it can also detect packer/compiler used to pack/build the target executable file. Being console based tool, you can easily integrate it with your malware automation suite.

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
API.txt		API.txt
ReadMe.txt		ReadMe.txt
exescan.py		exescan.py
userdb.txt		userdb.txt

Repository files navigation

Required:
	
	1. Python - http://python.org/   >= 2.5 < 3.0
	2. PEfile - http://code.google.com/p/pefile/

About

ExeScan is the FREE console based tool to detect anomalies in PE (Portable Executable) files. It quickly scans given executable file and detect all kind of anomalies in its PE header fields including checksum verifications, size of various header fields, improper size of raw data, non-ascii/empty section names etc. Various packers/protectors mod…

Readme