Skip to content

v1.0.0

Compare
Choose a tag to compare
@LordNoteworthy LordNoteworthy released this 16 Apr 06:37
· 119 commits to main since this release
  • Works with PE32/PE32+ file fomat.
  • Supports Intel x86/AMD64/ARM7ARM7 Thumb/ARM8-64/IA64/CHPE architectures.
  • MS DOS header.
  • Rich Header (calculate checksum).
  • NT Header (file header + optional header).
  • COFF symbol table and string table.
  • Sections headers + entropy calculation.
  • Data directories:
    • Import Table + ImpHash calculation.
    • Export Table.
    • Resource Table.
    • Exceptions Table.
    • Security Table + Authentihash calculation.
    • Relocations Table.
    • Debug Table (CODEVIEW, POGO, VC FEATURE, REPRO, FPO, EXDLL CHARACTERISTICS debug types).
    • TLS Table.
    • Load Config Directory (SEH, GFID, GIAT, Guard LongJumps, CHPE, Dynamic Value Reloc Table, Enclave Configuration, Volatile Metadata tables).
    • Bound Import Table.
    • Delay Import Table.
    • COM Table (CLR Metadata Header, Metadata Table Streams).
    • Report several anomalies.