Results 1 to 5 of 5

Thread: PE-bear

  1. #1

    PE-bear

    PE-bear is my new project. It’s a reversing tool for PE files.

    Objective: to deliver fast and flexible “first view” tool for malware analysts. Stable and capable to handle malformed PE files.

    Download link : http://hshrzd.wordpress.com/pe-bear/

    Worth to be add to the Collaborative RCE Tool Library.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Red wine, not vodka! ZaiRoN's Avatar
    Join Date
    Oct 2001
    Location
    Italy
    Posts
    922
    Blog Entries
    17
    Feel free to add it to Collaborative RCE Tool Library by yourself
    A mind is like a parachute. It doesnt work if it's not open.

  3. #3
    Pretty powerful, more useful disassembly than CFF Explorer's. Also, nice to be able to see virtual addresses instead of raw.

    I can't seem to be able to add a new import library, though, can't input the name etc.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Red wine, not vodka! ZaiRoN's Avatar
    Join Date
    Oct 2001
    Location
    Italy
    Posts
    922
    Blog Entries
    17
    That's strange, I have no problem adding sections. Try downloading the last available version.
    A mind is like a parachute. It doesnt work if it's not open.

  5. #5
    I tried again and had no problems, nice.

    I can't find a way to copy disasm contents to the clipboard, though.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •