NAME

pepack - check if a PE file is packed

SYNOPSIS

pepack [OPTIONS]... pefile

DESCRIPTION

pepack uses a pre-defined database to check packer signatures patterns in PE file. If no database is set, pepack tries to identify if executable is packed. It's part of pev, the PE file analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

OPTIONS

-d, --database <database>

use another database file instead of default (/usr/share/pev/userdb.txt).

-f, --format <text|csv|xml|html>

change output format (default is text).

-V, --version

show program version and exit.

--help

show help.

EXAMPLES

Check for packers in PE sample:

$ pepack sample.exe

REPORTING BUGS

Please, check the latest development code and report at https://github.com/merces/pev/issues

COPYRIGHT

Copyright © 2017 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.