Tool Added: PE Validator Script

Sat, 21 Nov 2009 20:57:00 GMT

Most recent version:
1.0.0.1

Most recent release date:

Description:
A simple script for the CFF Explorer which detects some of the most common PE integrity problems. Some of the things checked by this script:

-- check CRC32 (useful for drivers)
-- check number of rva and sizes
-- check image size
-- check sections
-- check that EP is valid
-- check that EP is in code
-- check that the EP section is executable
-- check data directories RVAs
-- check whether the API IsDebuggerPresent is imported

Collaborative RCE Tool Library - PE Validator Script

Tool Added: PE Validator Script