🔴 Getting Started with the Portable Executable File Format

Understanding file formats is essential to being able to analyze them effectively. Microsoft's portable executable, commonly referred to as PE, is one of the most important out there, as it contains executable code for the Windows operating system. In this session, we'll take a look at the basics of this binary file format by first creating sample programs, then analyzing them using a hex editor. We'll identify common characteristics of PE files, those often used in signatures, as well as begin to explore internal data structures. We'll also begin to explore the differences of these files when they reside on disk and when they are loaded into memory for execution. So dust off that hex-editor and join me as we start to scratch the surface of the PE file format!

[infiniti]

amazing break down of the fundamentals, thank you

[anjaliraut]

Great video.. thanks for this PE series 👍

[gianbattistavivolo]

Thanks for the video! Please continue making them

[unclesamautos]

Help anybody! I flash update 10 year old Bluetooth car modules with pretty simple PE exe. Problem is the language. After flash the voice is UK accent not US accent. I can see the data is in the big .bin file. Should I be looking at the few dll's or the pe exe itself?

[RebrandSoon]

Great info, subscribed. One thing, When I run pestudio 9.51 on a game .exe, it never finishes analyzing and when I try to do anything, it says to please wait until its done. I even let it run for 24 hrs. Did I do anything wrong?