PE-bear v0.3.7 (x86 & x64 & Linux)

Utshiha · #1 09-23-2014, 00:44

Quote:

PE-bear is a new reversing tool for PE files
with PE Bear you can view file signatures
and view packers which have been used.

Download :

x86

HTML Code:

http://filecloud.io/rgc3ul7p

x64

HTML Code:

http://filecloud.io/1gvs4xfl

Linux

HTML Code:

http://filecloud.io/mn5yw8rg

dj-siba · #2 09-23-2014, 17:05

PE-bear

Code:

http://hasherezade.net/PE-bear

traf0 · #3 01-13-2022, 18:01

PE-bear is a freeware reversing tool for PE files. Its objective was to deliver fast and flexible “first view” tool for malware analysts, stable and capable to handle malformed PE files.

"I officially discontinued the project in April 2014 after releasing 0.3.7 (23.03.2014). However, as per user requests, in April 2018 I released a version 0.3.8 with bugfixes. That release has been downloaded 15,918 times – that exceeded my expectations. Due to the fact that this project still has a group of active users and gets positive reviews, I decided to reopen development."

v0.5.5.1 - latest

Code:

https://github.com/hasherezade/pe-bear-releases/releases/

JMP-JECXZ · #4 09-18-2022, 20:11

Surprise! PE bear is Open Source now!

Code:

https://github.com/hasherezade/pe-bear

blue_devil · #5 11-13-2023, 19:35

PE-Bear v0.6.6

BUGFIX

Use NumberOfRvaAndSizes to specify the count of Data Directory entries
Fixed parsing of GuardCFFunctionTable
Fixed error in Checksum calculation
Fixed PE-bear hanging on loading a PE with too many sections
Fixed PE-bear hanging on loading a PE with too many imports

FEATURE

Added ImpHash
Added Rich Header hash
Added a localization option (currently supported languages: English, Chinese)

WARNING: The Windows build with vs10 suffix is built with Qt4 (legacy) - in contrast to the other builds that are with Qt5 (recommended). It is prepared for the purpose of backward compatibility with old versions of Windows (i.e. XP).

REPO:

Code:

https://github.com/hasherezade/pe-bear

RELEASE/DOWNLOAD

Code:

https://github.com/hasherezade/pe-bear/releases

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

The Following 2 Users Gave Reputation+1 to Utshiha For This Useful Post:
zeuscane (09-23-2014)

The Following 5 Users Say Thank You to traf0 For This Useful Post:
bigboss-62 (01-15-2022), darkBLACK (01-14-2022), niculaita (01-14-2022), tonyweb (01-14-2022), wilson bibe (01-14-2022)

The Following 3 Users Say Thank You to JMP-JECXZ For This Useful Post:
MarcElBichon (09-19-2022), tonyweb (09-19-2022), wilson bibe (09-19-2022)

The Following 2 Users Gave Reputation+1 to blue_devil For This Useful Post:
errorinside (11-14-2023), MarcElBichon (11-14-2023)

The Following 5 Users Say Thank You to blue_devil For This Useful Post:
darkBLACK (11-15-2023), JyotiDwivedi (11-14-2023), Mendax47 (11-19-2023), RedBlkJck (11-14-2023), wilson bibe (11-14-2023)