Portable Executable Format
From Forensics Wiki
Revision as of 23:33, 17 September 2012 by Joachim Metz
Windows mainly uses the Portable Executable Format to store its executable code.
Although the format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
- Wikipedia: Portable Executable
- PE and COFF Specification, by Microsoft
- Blog about pefile, by Ero Carrera