pepack - check if a PE file is packed
Contents
Copyright
Copyright (C) 2012 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later
<https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and
redistribute it. There is NO WARRANTY, to the extent permitted by law.
PEPACK(1)
Description
pepack uses a pre-defined database to check packer signatures patterns in PE file. If no database is
set, pepack tries to identify if executable is packed. It's part of pev, the PE file analysis toolkit.
pefile is a PE32/PE32+ executable or dynamic linked library file.
Examples
Check sample.exe for packers signatures:
$ pepack sample.exe
Name
pepack - check if a PE file is packed
Options
-d, --database<database>
Use database file (default: ./userdb.txt).
-f, --format<text|csv|xml|html>
Change output format (default: text)
-V, --version
Show version and exit.
--help Show help.
Reporting Bugs
Please, check the latest development code and report at https://github.com/mentebinaria/readpe/issues
See Also
ofs2rva(1), pedis(1), pehash(1), peldd(1), peres(1), pescan(1), pesec(1), pestr(1), readpe(1), rva2ofs(1)
Synopsis
pepack [OPTIONS]... pefile
