Difference between pages "Portable Executable Format" and "File:Hauwei U866C TAPS.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
 
 
Line 1: Line 1:
{{expand}}
 
  
The '''Portable Executable Format''' is used by [[Windows]] to store executable code.
 
The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
 
 
== See Also ==
 
* [[Windows Event Log (EVT)]]
 
* [[Windows XML Event Log (EVTX)]]
 
 
== External Links ==
 
 
* [http://en.wikipedia.org/wiki/Portable_Executable Wikipedia: Portable Executable]
 
* [http://msdn.microsoft.com/en-us/library/windows/hardware/gg463119.aspx PE and COFF Specification], by [[Microsoft]]
 
* [http://blog.dkbza.org/search/label/pefile Blog about pefile], by [[Ero Carrera]]
 
 
== Tools ==
 
* [http://code.google.com/p/pefile/ pefile is a Python module to read and work with PE (Portable Executable) files], by [[Ero Carrera]]
 
 
=== Resources ===
 
* [http://www.angusj.com/resourcehacker/ Resource Hacker], by [[Angus Johnson]]
 
 
[[Category:File Formats]]
 

Latest revision as of 20:43, 11 September 2013