Exetools  

Go Back   Exetools > General > Community Tools

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 09-23-2014, 00:44
Utshiha's Avatar
Utshiha Utshiha is offline
Family
 
Join Date: Jul 2014
Posts: 169
Rept. Given: 67
Rept. Rcvd 151 Times in 52 Posts
Thanks Given: 36
Thanks Rcvd at 111 Times in 45 Posts
Utshiha Reputation: 100-199 Utshiha Reputation: 100-199
PE-bear v0.3.7 (x86 & x64 & Linux)

Quote:
PE-bear is a new reversing tool for PE files
with PE Bear you can view file signatures
and view packers which have been used.

Download :



x86

HTML Code:
http://filecloud.io/rgc3ul7p

x64

HTML Code:
http://filecloud.io/1gvs4xfl

Linux


HTML Code:
http://filecloud.io/mn5yw8rg
__________________
� ﬗ ~}|zyx☀« Not Enought to Scare me -- I am Whitebeard »☀~}|zyxﬗ

Reply With Quote
The Following 2 Users Gave Reputation+1 to Utshiha For This Useful Post:
zeuscane (09-23-2014)
  #2  
Old 09-23-2014, 17:05
dj-siba's Avatar
dj-siba dj-siba is offline
Musician Member
 
Join Date: Jun 2003
Location: Outside the dot
Posts: 324
Rept. Given: 34
Rept. Rcvd 43 Times in 21 Posts
Thanks Given: 56
Thanks Rcvd at 159 Times in 43 Posts
dj-siba Reputation: 42
PE-bear
Code:
http://hasherezade.net/PE-bear
Reply With Quote
  #3  
Old 01-13-2022, 18:01
traf0 traf0 is offline
Family
 
Join Date: Nov 2017
Posts: 86
Rept. Given: 2
Rept. Rcvd 4 Times in 4 Posts
Thanks Given: 230
Thanks Rcvd at 120 Times in 46 Posts
traf0 Reputation: 4
PE-bear is a freeware reversing tool for PE files. Its objective was to deliver fast and flexible “first view” tool for malware analysts, stable and capable to handle malformed PE files.

"I officially discontinued the project in April 2014 after releasing 0.3.7 (23.03.2014). However, as per user requests, in April 2018 I released a version 0.3.8 with bugfixes. That release has been downloaded 15,918 times – that exceeded my expectations. Due to the fact that this project still has a group of active users and gets positive reviews, I decided to reopen development."

v0.5.5.1 - latest

Code:
https://github.com/hasherezade/pe-bear-releases/releases/
Reply With Quote
The Following 5 Users Say Thank You to traf0 For This Useful Post:
bigboss-62 (01-15-2022), darkBLACK (01-14-2022), niculaita (01-14-2022), tonyweb (01-14-2022), wilson bibe (01-14-2022)
  #4  
Old 09-18-2022, 20:11
JMP-JECXZ JMP-JECXZ is offline
Friend
 
Join Date: Mar 2017
Posts: 86
Rept. Given: 0
Rept. Rcvd 1 Time in 1 Post
Thanks Given: 14
Thanks Rcvd at 102 Times in 48 Posts
JMP-JECXZ Reputation: 1
Surprise! PE bear is Open Source now!
Code:
https://github.com/hasherezade/pe-bear
Reply With Quote
The Following 3 Users Say Thank You to JMP-JECXZ For This Useful Post:
MarcElBichon (09-19-2022), tonyweb (09-19-2022), wilson bibe (09-19-2022)
  #5  
Old 11-13-2023, 19:35
blue_devil's Avatar
blue_devil blue_devil is online now
Family
 
Join Date: Dec 2011
Location: Observable Universe
Posts: 265
Rept. Given: 52
Rept. Rcvd 49 Times in 22 Posts
Thanks Given: 229
Thanks Rcvd at 362 Times in 123 Posts
blue_devil Reputation: 49
PE-Bear v0.6.6 released

PE-Bear v0.6.6

BUGFIX
  • Use NumberOfRvaAndSizes to specify the count of Data Directory entries
  • Fixed parsing of GuardCFFunctionTable
  • Fixed error in Checksum calculation
  • Fixed PE-bear hanging on loading a PE with too many sections
  • Fixed PE-bear hanging on loading a PE with too many imports

FEATURE
  • Added ImpHash
  • Added Rich Header hash
  • Added a localization option (currently supported languages: English, Chinese)


WARNING: The Windows build with vs10 suffix is built with Qt4 (legacy) - in contrast to the other builds that are with Qt5 (recommended). It is prepared for the purpose of backward compatibility with old versions of Windows (i.e. XP).


REPO:
Code:
https://github.com/hasherezade/pe-bear
RELEASE/DOWNLOAD
Code:
https://github.com/hasherezade/pe-bear/releases
Reply With Quote
The Following 2 Users Gave Reputation+1 to blue_devil For This Useful Post:
errorinside (11-14-2023), MarcElBichon (11-14-2023)
The Following 5 Users Say Thank You to blue_devil For This Useful Post:
darkBLACK (11-15-2023), Mendax47 (11-19-2023), RedBlkJck (11-14-2023), wilson bibe (11-14-2023)
  #6  
Old 01-09-2024, 16:51
blue_devil's Avatar
blue_devil blue_devil is online now
Family
 
Join Date: Dec 2011
Location: Observable Universe
Posts: 265
Rept. Given: 52
Rept. Rcvd 49 Times in 22 Posts
Thanks Given: 229
Thanks Rcvd at 362 Times in 123 Posts
blue_devil Reputation: 49
PE-Bear v0.6.7 released

PE-Bear v0.6.7

BUGFIX
  • Fixed parsing a PE header in file with oversized DOS stub
  • Fixed incorrectly decoded Timestamp for Borland IMAGE_RESOURCE_DIRECTORY
  • Fixed crashes on edit via hex editor. Stability improvements.
  • Validate relocation block before parsing (skip invalid)

FEATURE
  • Added Strings tab (displaying ANSI and Unicode strings)
  • Search for defined binary patterns within a selected file
  • Added detection if the loaded PE is a memory dump in a virtual format (and needs remapping)
  • Added remapping of a file with one click (new button on the Sections' Tab toolbar)

WARNING: The Windows build with vs10 suffix is built with Qt4 (legacy) - in contrast to the other builds that are with Qt5 (recommended). It is prepared for the purpose of backward compatibility with old versions of Windows (i.e. XP).

REPO:
Code:
https://github.com/hasherezade/pe-bear
RELEASE/DOWNLOAD:
Code:
https://github.com/hasherezade/pe-bear/releases
Reply With Quote
The Following User Gave Reputation+1 to blue_devil For This Useful Post:
MarcElBichon (01-10-2024)
The Following 3 Users Say Thank You to blue_devil For This Useful Post:
niculaita (01-10-2024), wilson bibe (01-10-2024), zeffy (01-09-2024)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



All times are GMT +8. The time now is 16:26.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )