bennyhat / peid-finder

A raw PEID finder that runs in NodeJS

peid-finder

Will find extract a portable executable entrypoint string (up to 32 characters) from an executable for the purpose of identifying it.

NOTE: an issue with arch misidentification has been fixed for 32 bit node on 64 bit windows. 
32 bit detection has been fixed in general.
Also, at some point I will get this moved over to a node-gyp based install.
This will strip out some of the unnessary objdump stuff and (MAYBE?!) help with running this cross-platform.

This can be used as a NodeJS module

var peidFinder = require("peid-finder");
var peidFinder.find("**/*.exe",8,function (error, peids) {
});

Or from command line after install:

$ peid-finder **/*.exe 8

Both options will return an array of objects that have an executable name and peid, like below:

[
 {
   "executable":"file.exe",
   "peid":"12345678",
 }
]