Difference between pages "Executable" and "File:Y301-A1 taps.jpg"

From ForensicsWiki
(Difference between pages)
Jump to: navigation, search
Line 1: Line 1:
An executable file is used to perform tasks according to encoded instructions. Executable files are sometimes also referred to as binaries which technically can be considered a sub class of executable files.
There are multiple families of executable files:
* Scripts; e.g. shell scripts, batch scripts (.bat)
* DOS, Windows executable files (.exe) which can be of various formats like: MZ, PE/COFF, NE
* Mach-O
== External Links ==
* [http://en.wikipedia.org/wiki/Executable Wikipedia: Executable]
=== MZ, PE/COFF ===
* [http://en.wikipedia.org/wiki/Portable_Executable Wikipedia: Portable Executable]
* [http://msdn.microsoft.com/en-us/windows/hardware/gg463119.aspx Microsoft PE and COFF Specification]
* [https://googledrive.com/host/0B3fBvzttpiiSd1dKQVU0WGVESlU/Executable%20(EXE)%20file%20format.pdf MZ, PE-COFF executable file format (EXE)], by the [[libexe|libexe project]], October 2011
* [http://seclists.org/fulldisclosure/2013/Oct/157 The Internal of Reloc .text], Full Disclosure Mailing list, October 21, 2013
=== Mach-O ===
* [http://en.wikipedia.org/wiki/Mach-O Wikipedia: Mach-O]
== Tools ==
=== MZ, PE/COFF ===
* [https://code.google.com/p/pefile/ pefile], multi-platform Python module to read and work with Portable Executable (aka PE) files

Revision as of 22:44, 14 December 2013