pepack(1) · carta

Usage

pepack [OPTIONS] ... pefile

Overview

pepack uses a pre-defined database to check packer signatures patterns in PE file. If no database is set, pepack tries to identify if executable is packed. It's part of pev, the PE file analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

Options

-d, --database <database>: Use database file (default: ./userdb.txt).

-f, --format <text|csv|xml|html>: Change output format (default: text)

-V, --version: Show version and exit.

--help: Show help.

Examples

Check sample.exe for packers signatures:

: $ pepack sample.exe

Releases

4 releases since Debian 10 (Buster); the text changed 2 times.

ofs2rva(1) converts a PE raw file offset to relative virtual address pedis(1) disassemble PE sections and functions pehash(1) calculate hashes of PE pieces peldd(1) shows library dependencies for a given PE file peres(1) analyze and extract PE file resources pescan(1) identify suspicious characteristics in PE files pesec(1) check for protections in PE files pestr(1) search strings in PE files readpe(1) displays information about PE files rva2ofs(1) converts a PE relative virtual address to raw file offset

Referred to by

pedis(1) disassemble PE sections and functions peldd(1) shows library dependencies for a given PE file peres(1) analyze and extract PE file resources pesec(1) check for protections in PE files pestr(1) search strings in PE files pehash(1) calculate hashes of PE pieces pescan(1) identify suspicious characteristics in PE files readpe(1) displays information about PE files ofs2rva(1) converts a PE raw file offset to relative virtual address rva2ofs(1) converts a PE relative virtual address to raw file offset