PE parser implementation
Project description
PE Parser
PE Parser is a Python (3.6+) library and a set of command-line tools for preprocessing Portable Executable (PE) files. The goal of the library is to provide an intermediate representation of the PE files that allow for easy manipulation and feature engineering. The main features include:
- Preprocessing of Portable Executable files in hexadecimal format or its assembly language source code.
- Extraction of well-known features for malware detection and classification.
- Tools to visualize malware as grayscale images or its structural entropy representation.
For more information, check the documentation hosted on Read the docs.
Install
The easiest way to install PE Parser is to clone the repository as follows:
git clone https://github.com/danielgibert/pe_parser.git
cd pe_parser
pip install -e .
License
PE Parser is free software made available under the MIT License. For details see the LICENSE file.
Contact
If you have any trouble please contact daniel.gibertlla@gmail.com
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
pe_parser-0.1.2.tar.gz
(30.3 kB
view hashes)
Built Distribution
pe_parser-0.1.2-py3-none-any.whl
(35.3 kB
view hashes)
Close
Hashes for pe_parser-0.1.2-py3-none-any.whl
Algorithm | Hash digest | |
---|---|---|
SHA256 | 0d71c53f8277b4936c4238529245b9d03aae3243fc91cd9b0a7cad1939f7277a |
|
MD5 | 94d9ad53224a59b88988855c3d3f8b08 |
|
BLAKE2b-256 | d27fd598724fc55c85d7666c43dc6067c6c324d764058e16a55dd15e56a27bac |