Portable Executable Format
From Forensics Wiki
Revision as of 00:35, 18 September 2012 by Joachim Metz
The Portable Executable Format is used by Windows to store executable code. The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.
- Wikipedia: Portable Executable
- PE and COFF Specification, by Microsoft
- Blog about pefile, by Ero Carrera