NAME¶

pepack - check if a PE file is packed

SYNOPSIS¶

pepack [OPTIONS]... pefile

DESCRIPTION¶

pepack uses a pre-defined database to check packer signatures patterns in PE file. If no database is set, pepack tries to identify if executable is packed. It's part of pev, the PE file analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

OPTIONS¶

-d, --database <database>

Use database file (default: ./userdb.txt).

-f, --format <text|csv|xml|html>

Change output format (default: text)

-V, --version

Show version and exit.

--help

Show help.

EXAMPLES¶

Check sample.exe for packers signatures:

$ pepack sample.exe

REPORTING BUGS¶

Please, check the latest development code and report at https://github.com/mentebinaria/readpe/issues

SEE ALSO¶

ofs2rva(1), pedis(1), pehash(1), peldd(1), peres(1), pescan(1), pesec(1), pestr(1), readpe(1), rva2ofs(1)

COPYRIGHT¶

Copyright (C) 2012 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.