pehash1

Usage

Overview

pehash uses libssl, libfuzzy and other black magic to calculate PE file hashes. It's part of pev, the PE file analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

Options

-a, --all

Hash file, sections and headers with md5, sha1, sha256, ssdeep and imphash.

-c, --content

Hash only the file content (default).

-f, --format <text|csv|xml|html>

Change output format (default is text).

-h, --header <dos|coff|optional>

Hash only the header with the specified name.

-s, --section <section_name>

Hash only the section with the specified name.

--section-index <section_index>

Hash only the section at the specified index (1..n).

-V, --version

Show version.

--help

Show this help.

Examples

Check all supported checksums of putty.exe file:

$ pehash -a putty.exe