exeplot 0.5.4

Library for plotting executable samples supporting multiple formats

ExePlot

Search for samples from various malware databases.

This library implements multiple plot types for illustrating executable samples. It currently supports the PE, ELF and Mach-O formats, relying on lief for abstracting them.

$ pip install exeplot

Usage Examples

Draw a byte plot of calc_packed.exe:

$ exeplot byte calc_packed.exe

Draw a simplified byte plot of calc_packed.exe:

$ exeplot byte calc_packed.exe --no-title --no-legend

Draw a pie plot of calc_packed.exe:

$ exeplot pie calc_packed.exe

Draw a nested pie plot of calc_packed.exe:

$ exeplot nested_pie calc_packed.exe

Draw a stacked and scaled entropy plot of calc_orig.exe and calc_packed.exe:

$ exeplot entropy calc_orig.exe calc_packed.exe

Draw a simplified entropy plot of calc_packed.exe:

$ exeplot entropy calc_packed.exe --no-title --no-legend --no-label --no-entrypoint