PPEE (puppy) is a Professional PE file Explorer for reversers, malware researchers and those who want to inspect PE files in more details statically.

PPEE (puppy) is a Professional PE file Explorer for reversers, malware researchers and those who want to inspect PE files in more details statically.Puppy is robust against malformed and crafted PE files which makes it handy for reversers, malware researchers and those who want to inspect PE files for more details. All directories in a PE file including Export, Import, Resource, Exception, Certificate(Relies on Windows API), Base Relocation, Debug, TLS, Load Config, Bound Import, IAT, Delay Import, and CLR are supported.There are lots of tools out there for statically analyzing malicious binaries, but they are common tools for ordinary files.Puppy is a lightweight yet strong tool for static investigation of suspicious files. Two companion plugins are also provided. FileInfo, to query the file in the well-known malware repositories and take one-click technical information about the file such as its size, entropy, attributes, hashes, version info and so on. YaraPlugin, to test Yara rules against an opened file.

  Download