mauricelambert / ProgramExecutableAnalyzer

This script analyzes MZ-PE (MS-DOS) executable file

Program Executable Analyzer

Description

This script analyzes MZ-PE (MS-DOS) executable file.

This tool is useful for malware analysis or debug/understand compiled dependencies.

1. Analyze DLLs and imported functions name
2. Analyze exported functions name
3. Get executable filename at the compiled time
4. Get encodings and languages used for compilation
5. Get timestamps saved in executable
6. Get architecture, system version, resources (Version file, Manifest)
7. Get company name, product name, product version, copyright
8. Sections sizes and addresses

Requirements

• python3
• Python 3 Standard library

Installation

pip install ProgramExecutableAnalyzer

Usages

ProgramExecutableAnalyzer.py -h
ProgramExecutableAnalyzer.py executable.exe
ProgramExecutableAnalyzer.py -c executable.exe  # No color
ProgramExecutableAnalyzer.py -v executable.exe  # Verbose mode

Screenshots

Links

• Github Page
• Executable
• Pypi package

Licence

Licensed under the GPL, version 3.