NAME

pepack - check if a PE file is packed

SYNOPSIS

pepack [OPTIONS]... pefile

DESCRIPTION

pepack uses a pre-defined database to check packer signatures patterns in PE file. If no database is set, pepack tries to identify if executable is packed. It's part of pev, the PE file analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

OPTIONS

-d, --database <database>

Use database file (default: ./userdb.txt).

-f, --format <text|csv|xml|html>

Change output format (default: text)

-V, --version

Show version and exit.

--help

Show help.

EXAMPLES

Check sample.exe for packers signatures:

$ pepack sample.exe

REPORTING BUGS

Please, check the latest development code and report at https://github.com/merces/pev/issues

SEE ALSO

ofs2rva(1), pedis(1), pehash(1), peldd(1), peres(1), pescan(1), pesec(1), pestr(1), readpe(1), rva2ofs(1)

COPYRIGHT

Copyright (C) 2012 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.