PE-bear
PE-bear is a multiplatform reversing tool for PE files. Its objective is to deliver fast and flexible “first view” for malware analysts, stable and capable of handling malformed PE files.
Key features:
- Multiplatform: Available on Windows, Linux, and MacOS.
- Fast First View: Quickly analyze PE files for initial assessment.
- Malformed PE Handling: Capable of processing malformed or unusual PE files.
- Signature Database: Identifies known packers and protectors using PEid's UserDB signatures.
Use cases:
- Malware analysis
- Reverse engineering
- PE file inspection and editing
