Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/hasherezade/pe-bear
Portable Executable reversing tool with a friendly GUI
https://github.com/hasherezade/pe-bear
bearparser malware-analysis multiplatform pe-analyzer pe-analyzer-gui pe-editor pe-file pe-format
Last synced: 17 days ago
JSON representation
Portable Executable reversing tool with a friendly GUI
- Host: GitHub
- URL: https://github.com/hasherezade/pe-bear
- Owner: hasherezade
- License: gpl-2.0
- Created: 2022-09-18T04:10:16.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2024-04-14T15:40:43.000Z (2 months ago)
- Last Synced: 2024-04-14T16:08:39.514Z (2 months ago)
- Topics: bearparser, malware-analysis, multiplatform, pe-analyzer, pe-analyzer-gui, pe-editor, pe-file, pe-format
- Language: C++
- Homepage: https://hshrzd.wordpress.com/pe-bear/
- Size: 1.17 MB
- Stars: 2,391
- Watchers: 42
- Forks: 157
- Open Issues: 12
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Lists
- Awesome-Daily - PE-bear
- awesome - hasherezade/pe-bear - Portable Executable reversing tool with a friendly GUI (C++)
- awesome-stars - pe-bear
- awesome-stars - hasherezade/pe-bear - `★2481` Portable Executable reversing tool with a friendly GUI (C++)
README
PE-bear
-
[](https://ci.appveyor.com/project/hasherezade/pe-bear)
[](https://www.codacy.com/gh/hasherezade/pe-bear/dashboard?utm_source=github.com&utm_medium=referral&utm_content=hasherezade/pe-bear&utm_campaign=Badge_Grade)
[](https://www.gnu.org/licenses/old-licenses/gpl-2.0.en.html)
[](https://github.com/hasherezade/pe-bear/commits)
[](https://github.com/hasherezade/pe-bear/releases)
[](https://github.com/hasherezade/pe-bear/releases)
[](https://github.com/hasherezade/pe-bear/releases)
PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable to handle malformed PE files.
Signatures for PE-bear:
+ [SIG.txt](SIG.txt) (updated: Oct 17, 2022) - *contains signatures from [PEid's UserDB](http://www.softpedia.com/get/Programming/Packers-Crypters-Protectors/PEiD-updated.shtml) - converted by a script provided by [crashish](http://crashish.blogspot.com/2013/09/peid-signature-conversion-for-pe-bear.html)*
## Builds
📦 ⚙️ Download the latest [release](https://github.com/hasherezade/pe-bear/releases).
### Windows Packaging
 Available also via [Chocolatey](https://community.chocolatey.org/packages/pebear)
 Available also via [Scoop](https://scoop.sh/#/apps?q=pe-bear)
### Test Builds
🧪 Fresh **test builds** (ahead of the official release) can be downloaded from the [AppVeyor build server](https://ci.appveyor.com/project/hasherezade/pe-bear). They are created on each commit to the `main` branch. You can download them by clicking on the build version, then choosing the tab `Artifacts`. WARNING: those builds may be unstable.
> An archive of **old releases** is available here: https://github.com/hasherezade/pe-bear-releases
### Available releases
The **Linux** build requires appropriately **Qt_5.14 or Qt_5.15 to be installed**.
The **Windows** build with *vs13* suffix(built with Visual Studio 2013) has no external dependencies.
The **Windows** build with *vs19* suffix (built with Visual Studio 2019) requires the [redistributable package for Visual Studio 2015 - 2022](https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170).
The **Windows** build with *vs10* suffix is built with Qt4 (legacy) - in contrast to the other builds that are with Qt5 (recommended). It is prepared for the purpose of backward compatibility with old versions of Windows (i.e. XP).
## How to build
### Requires:
+ [git](https://git-scm.com/downloads)
+ [cmake](http://www.cmake.org)
+ [Qt5](https://www.qt.io/download) (optionally Qt4)
+ bearparser (submodule of the current repository)
+ capstone (submodule of the current repository)
### Clone
Use **recursive clone** to get the repo together with submodules:
```console
git clone --recursive https://github.com/hasherezade/pe-bear.git
```
### Building on Windows
Use [CMake](http://www.cmake.org) to generate a Visual Studio project. Open in Visual Studio and build.
### Building on Linux and MacOS
To build it on Linux or MacOS you can use the given scripts:
+ [build.sh](./build.sh) - default, builds with Qt5
+ [build_qt5.sh](./build_qt5.sh) - builds with Qt5
+ [build_qt4.sh](./build_qt4.sh) - builds with Qt4
To generate the `.app` bundle on MacOS you can use:
+ [macos_wrap.sh](./macos_wrap.sh)
---
If you like PE-bear, you can support it:
[](https://www.paypal.com/donate/?hosted_button_id=FQX9B9VHCRBF4)