Click or drag to resize
PeNet Library
PeNet is .Net library written to parse and edit Windows Portable Executable (PE) files. It's completly written in managed code and does not depend on PInvoke. For example, PeNet show imports and exports of PE files, extracts certificate revocation lists from binary signatures or computes different file hashs incuding the ImpHash which is popular in malware analysis. Project page
This is the main namespace where you find all functions and classes to analyse a PE file and interpret the different values and flags.
The PatternMatching namespace contains functions to match strings and byte patterns. This is useful if you want to match for malware signatures.
The Structures namespace contains all Windows struct which are implemented in the library.