erocarrera/pefile

Health v2 · maintenance only

Adoption not part of the score

2064 stars · 541 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

pefile is a multi-platform Python module for parsing and working with Portable Executable (PE) files such as EXE and DLL binaries. It exposes PE headers, sections, resources, and embedded data as Python attributes, and supports inspection, modification, and packer detection.

Use cases

• parse headers and sections from exe and dll files in python
• analyze PE files for malware research
• extract strings and resources from a windows executable
• detect packers in a PE binary using PEiD signatures
• read and modify fields in a portable executable
• inspect embedded data inside a PE file

When to choose

• you need to programmatically inspect or analyze Windows PE binaries in Python
• you're doing malware analysis, reverse engineering, or binary forensics
• you want a pure-Python, cross-platform PE parser with no heavy dependencies

When to avoid

• you need to parse non-PE formats like ELF or Mach-O
• you need to restructure or rebuild PE files with new sections (modification support is limited)
• you need a GUI-based static analysis tool rather than a library

Facets

library · maturity stable

parser security developer-tools security reverse-engineering files developer-tools python cross-platform pe-files portable-executable malware-analysis binary-parsing windows-binaries

Member repositories

For agents

markdown · JSON · MCP: product_card(name="erocarrera/pefile")