NAME

pescan - identify suspicious characteristics in PE files

SYNOPSIS

pescan [OPTIONS]... pefile

DESCRIPTION

pescan analyze a PE file statically to determine if it contains suspicious characteristics. It's part of pev, the PE file analysis toolkit.

pefile is a PE32/PE32+ executable or dynamic linked library file.

OPTIONS

-f, --format <text|csv|xml|html>

Change output format (default is text).

-v, --verbose

Show more information about found items.

-V, --version

Show version.

--help

Show help.

EXAMPLES

Search suspicious things in putty.exe:

$ pescan putty.exe

REPORTING BUGS

Please, check the latest development code and report at https://github.com/merces/pev/issues

SEE ALSO

ofs2rva(1), pedis(1), pehash(1), peldd(1), pepack(1), peres(1), pesec(1), pestr(1), readpe(1), rva2ofs(1)

COPYRIGHT

Copyright (C) 2013 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.