---
name: "peframe"
section: "1"
platform: "linux"
package: "peframe"
version: "5.0.1+git20170303.0.e482def+dfsg-3"
release: "Debian 10 (Buster)"
platforms: ["linux"]
url: "https://new.carta.tech/peframe"
---

# peframe(1)

perform static analysis on portable executable malware

## NAME

**PEframe** - perform static analysis on portable executable malware

## SYNOPSIS

```
peframe [options] FILENAME
```

## DESCRIPTION

**PEframe is a open source tool to perform static analysis on Portable Executable** **malware and generic suspicious files. It can help malware researchers to** **detect packer, xor, digital signature, mutex, anti debug, anti virtual** **machine, suspicious sections and functions, and much more information about** **the suspicious files.**

## OPTIONS

- **--json**

  **Enable full JSON output**

- **--strings**

  **Enable strings output.**

## EXAMPLES

**peframe malware.exe**

**peframe --json malware.exe**

**peframe --strings malware.exe**

## AUTHOR

**This tool is currently maintained by Gianni 'guelfoweb' Amato, who can be** **contacted at guelfoweb@gmail.com or twitter @guelfoweb. Suggestions and** **criticism are welcome.**