Portable Executable Format

Please help to improve this article by expanding it. Further information might be found on the discussion page.

Windows mainly uses the Portable Executable Format to store its executable code.

Although the format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.

External Links

• Wikipedia: Portable Executable
• PE and COFF Specification, by Microsoft
• Blog about pefile, by Ero Carrera

Tools

• pefile is a Python module to read and work with PE (Portable Executable) files, by Ero Carrera

Resources

• Resource Hacker, by Angus Johnson