PE Format Analyze

<<backto DongLi's Page

In the summer holiday of 2007, I investigated the PE (Portable Exacutive) file format.

It is one of the most complex file formats developed by Micorsoft. Also, because it is execuatalbe, analyzing PE file format is essential for detecting the malicious softwars. With this knowledge, we can even change the behavior of the softwares. I used two weeks fully analyzed the detailed structure of this file format, get a general view about it. In the same time, I writed my work draft and added it to my blog.

My work draft: (chinese) List on my blog

  1. PE File Analyze 1
  2. PE File Analyze 2
  3. PE File Analyze 3
  4. PE File Analyze 4
  5. PE File Analyze 5
  6. PE File Analyze 6
  7. PE File Analyze 7
  8. PE File Analyze 8
  9. PE File Analyze 9
  10. PE File Analyze 10
  11. PE File Analyze 11
  12. PE File Analyze 12
  13. PE File Analyze 14
  14. PE File Analyze 15
Summery of my report: PE-analyze.doc

<<backto DongLi's Page