PE-bear – version 0.2.8 avaliable!

Dear PE-bear users. That’s what I prepared for this week:

http://hshrzd.wordpress.com/pe-bear/

Major Features:

[feat#1] Keeping all modifications history – every edition can be undone
[feat#2] In packer signatures searching: added possibility to deep scan any chosen section
[feat#3] More detailed info about found signature
[feat#4] MD5 calculation (on demand)

moreover:
– Improved navigation
– improved performance (faster file loading)
– some minor bug fixes

0_2_8_matched

0_2_8_search

By default, signatures are searching at the Entry Point. But on demand you can scan full section…

About these ads

About hasherezade

high and low level programmer, malware analyst
This entry was posted in RCE, PE-bear. Bookmark the permalink.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s