Difference between pages "Portable Executable Format" and "File:Hauwei U866C TAPS.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
Line 1: Line 1:
The '''Portable Executable Format''' is used by [[Windows]] to store executable code.
The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
== See Also ==
* [[Windows Event Log (EVT)]]
* [[Windows XML Event Log (EVTX)]]
== External Links ==
* [http://en.wikipedia.org/wiki/Portable_Executable Wikipedia: Portable Executable]
* [http://msdn.microsoft.com/en-us/library/windows/hardware/gg463119.aspx PE and COFF Specification], by [[Microsoft]]
* [http://blog.dkbza.org/search/label/pefile Blog about pefile], by [[Ero Carrera]]
== Tools ==
* [http://code.google.com/p/pefile/ pefile is a Python module to read and work with PE (Portable Executable) files], by [[Ero Carrera]]
=== Resources ===
* [http://www.angusj.com/resourcehacker/ Resource Hacker], by [[Angus Johnson]]
[[Category:File Formats]]

Latest revision as of 01:43, 12 September 2013