Portable Executable Format

Please help to improve this article by expanding it. Further information might be found on the discussion page.

The Portable Executable Format is used by Windows to store executable code. The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.

See Also

• Windows Event Log (EVT)
• Windows XML Event Log (EVTX)

External Links

• Wikipedia: Portable Executable
• PE and COFF Specification, by Microsoft
• Blog about pefile, by Ero Carrera

Tools

• pefile is a Python module to read and work with PE (Portable Executable) files, by Ero Carrera

Resources

• Resource Hacker, by Angus Johnson