Couldn't load file; corrupt or not a PE?

[eljeffeg]

Not sure if this is a winchecksec issue or a pe-parse issue, but I get many binaries that give Couldn't load file; corrupt or not a PE? when running winchecksec / uthenticode. Running pe-parse on one file gives Error 9: (Bad Magic) ParsePEFromBuffer:2528.

Here is the header of one such file.
example_head1.zip

[woodruffw]

Thanks for the report @eljeffeg!

From a quick glance, this is probably a pe-parse issue, since the parsing fails at that level. But I'll take a look at the samples you sent over and confirm.