Skip to content

Latest commit

 

History

History
46 lines (39 loc) · 1.37 KB

README.md

File metadata and controls

46 lines (39 loc) · 1.37 KB

Perec

This project is part of the forensics class from EURECOM.
[B1] Write a (preferably python) Linux command-line tools to parse, extract, and visualize PE resources.

Features & help

Perec uses lief library to extract PE resources or raw data to parse.

Those are the supported features :

  • CURSOR : Save cursor files to directory
  • BITMAP : Save bitmap files to directory
  • ICON : Display information and save icon files to directory
  • MENU : Display or Save menu files to directory
  • DIALOG : Display or Save dialog files to directory
  • STRING : Display or Save string files to directory
  • RCDATA : Save rcdata files to directory
  • MESSAGETABLE : Display or Save messagetable files to directory
  • VERSION : Display or Save version files to directory
  • MANIFEST : Display or Save manifest file to directory

Supported by lief

  • ICON
  • DIALOG
  • VERSION
  • MANIFEST

Parsed from raw data

  • CURSOR
  • BITMAP
  • MENU
  • STRING
  • RCDATA
  • MESSAGETABLE

Usage

python3 perec.p -i <inputfile> -o <outputDir>  [option]  
-i <inputfile> : Input File  
-o <outputDir> : Output Directory  
-t : Display PE resources found  
-r : Display all PE resources supported by lief resources manager  
-f : Display file infos  
-s <RESOURCE>: Display PE resource with the possibility to save it if -o was used before 
-a : Display or save all PE resources available (from lief + the parsed PE resources)