EvilZone

Hacking and Security => Reverse Engineering => : Axon February 02, 2012, 07:14:23 AM

: NPE File Analyzer
: Axon February 02, 2012, 07:14:23 AM
 NPE File Analyzer is a utility that allow users to view and edit 32bit and 64bit Portable Executable (PE) files,  such as .EXE .DLL and .SYS files. NPE provides functions for inspection of unknown binaries, you can analyze sections, resources, import and export tables, relocations, TlsTable, and much more. It has a built-in process manager to analyze running processes and loaded modules.


(http://www.novirusthanks.org/wp-content/uploads/2010/11/npe.jpg)



http://www.novirusthanks.org/product/npe-file-analyzer/ (http://www.novirusthanks.org/product/npe-file-analyzer/)

: Re: NPE File Analyzer
: Live Wire February 02, 2012, 08:16:54 AM
View and edit how? Please don't tell me it is just byte code. I hate that shit.
: Re: NPE File Analyzer
: FuyuKitsune February 02, 2012, 02:42:00 PM
View and edit how? Please don't tell me it is just byte code. I hate that shit.
It's a resource editor like ResHack or ResEdit.
: Re: NPE File Analyzer
: Axon February 02, 2012, 05:39:50 PM
View and edit how? Please don't tell me it is just byte code. I hate that shit.

It seems you have no clue in RE. with this tool you can view the sections of the PE file in hex. This helps you detect any injected code or any crap that might fuck up your machine
: Re: NPE File Analyzer
: Live Wire February 02, 2012, 10:15:46 PM
It seems you have no clue in RE. with this tool you can view the sections of the PE file in hex. This helps you detect any injected code or any crap that might fuck up your machine


Ah, didn't read through very carefully. Thought it was decompiler. My bad. Thanks