Reply to thread

Message

<blockquote data-quote="struppigel" data-source="post: 1015222" data-attributes="member: 86910">I have finally developed a GUI version of my Portable Executable parser (Windows EXE, DLL files are commonly Portable Executables).It uses my parsing library PortEx that has been in development since 2014 (with big breaks in between). Initially it was my master thesis project with the goal to analyse anomalies in malware files.So far I only had a command line interface, initially just to test the library output but I continued using it at work and making changes. But a CLI tool is not as comfortable to use and most people probably prefer a GUI.Download: [URL unfurl=&quot;true&quot;]https://github.com/struppigel/PortexAnalyzerGUI/releases[/URL]Requirements: JRE 9 or laterSupported OS: Tested for Linux and Windows, but others should work tooFeatures:<ul>
<li data-xf-list-type="ul">Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table</li>
<li data-xf-list-type="ul">PE Structures: Import Section, Resource Section, Export Section, Debug Section</li>
<li data-xf-list-type="ul">Scanning for file format anomalies, including structural anomalies, deprecated, reserved, wrong or non-default values.</li>
<li data-xf-list-type="ul">Visualize file structure, local entropies and byteplot</li>
<li data-xf-list-type="ul">Calculate Shannon Entropy, imphash, MD5, SHA256, Rich and RichPV hash</li>
<li data-xf-list-type="ul">Overlay and overlay signature scanning</li>
<li data-xf-list-type="ul">Version information and manifest</li>
</ul>This is the first release of the GUI verison. For now it has less features than the CLI version, but I will update as soon as I can.[ATTACH=full]271362[/ATTACH][ATTACH=full]271382[/ATTACH]</blockquote>

[QUOTE="struppigel, post: 1015222, member: 86910"] I have finally developed a GUI version of my Portable Executable parser (Windows EXE, DLL files are commonly Portable Executables). It uses my parsing library PortEx that has been in development since 2014 (with big breaks in between). Initially it was my master thesis project with the goal to analyse anomalies in malware files. So far I only had a command line interface, initially just to test the library output but I continued using it at work and making changes. But a CLI tool is not as comfortable to use and most people probably prefer a GUI. [B]Download: [/B][URL unfurl="true"]https://github.com/struppigel/PortexAnalyzerGUI/releases[/URL] [B]Requirements: [/B]JRE 9 or later [B]Supported OS: [/B]Tested for Linux and Windows, but others should work too [B]Features:[/B] [LIST] [*]Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table [*]PE Structures: Import Section, Resource Section, Export Section, Debug Section [*]Scanning for file format anomalies, including structural anomalies, deprecated, reserved, wrong or non-default values. [*]Visualize file structure, local entropies and byteplot [*]Calculate Shannon Entropy, imphash, MD5, SHA256, Rich and RichPV hash [*]Overlay and overlay signature scanning [*]Version information and manifest [/LIST] This is the first release of the GUI verison. For now it has less features than the CLI version, but I will update as soon as I can. [ATTACH type="full" alt="screenshot.png"]271362[/ATTACH] [ATTACH type="full"]271382[/ATTACH] [/QUOTE]

Verification