http://www.woodmann.com/collaborative/tools/index.php?title=PE_Validator_Script&action=feed&feed=atomCollaborative RCE Tool Library - PE Validator Script2009-11-21T21:17:46ZUpdate Notification Feed for PE Validator ScriptMediaWiki 1.11.2 via WikiArticleFeeds 0.6.3 (+ dELTA mods)http://www.woodmann.com/collaborative/tools/index.php/PE_Validator_Script Tool Added: PE Validator Script 2009-11-21T21:17:00Z
<p><b>Most recent version:</b><br />
<i>1.0.0.1</i>
</p><p><b>Most recent release date:</b><br />
</p><p><b>Description:</b><br />
<i>A simple script for the CFF Explorer which detects some of the most common PE integrity problems. Some of the things checked by this script:<br /><br />-- check CRC32 (useful for drivers)<br />-- check number of rva and sizes<br />-- check image size<br />-- check sections<br />-- check that EP is valid<br />-- check that EP is in code<br />-- check that the EP section is executable<br />-- check data directories RVAs<br />-- check whether the API IsDebuggerPresent is imported</i>
</p>
<pre>