Author Topic: NPE File Analyzer (Read 266 times)

Axon · « **on:** February 02, 2012, 07:14:23 AM »

NPE File Analyzer is a utility that allow users to view and edit 32bit and 64bit Portable Executable (PE) files, such as .EXE .DLL and .SYS files. NPE provides functions for inspection of unknown binaries, you can analyze sections, resources, import and export tables, relocations, TlsTable, and much more. It has a built-in process manager to analyze running processes and loaded modules.

http://www.novirusthanks.org/product/npe-file-analyzer/

Live Wire · « **Reply #1 on:** February 02, 2012, 08:16:54 AM »

View and edit how? Please don't tell me it is just byte code. I hate that shit.

FuyuKitsune · « **Reply #2 on:** February 02, 2012, 02:42:00 PM »

Quote from: Live Wire on February 02, 2012, 08:16:54 AM

View and edit how? Please don't tell me it is just byte code. I hate that shit.

It's a resource editor like ResHack or ResEdit.

Axon · « **Reply #3 on:** February 02, 2012, 05:39:50 PM »

Quote from: Live Wire on February 02, 2012, 08:16:54 AM

View and edit how? Please don't tell me it is just byte code. I hate that shit.

It seems you have no clue in RE. with this tool you can view the sections of the PE file in hex. This helps you detect any injected code or any crap that might fuck up your machine

Live Wire · « **Reply #4 on:** February 02, 2012, 10:15:46 PM »

Quote from: Axon on February 02, 2012, 05:39:50 PM

It seems you have no clue in RE. with this tool you can view the sections of the PE file in hex. This helps you detect any injected code or any crap that might fuck up your machine

Ah, didn't read through very carefully. Thought it was decompiler. My bad. Thanks