Win32 Static Analysis in Python Ero Carrera Sabre Security GmbH (Slides) 计算机

Win32 Static Analysis in PythonEro Carrera Sabre Security GmbHObjective• Introduce some basic tools for Windows binary inspection.• These tools allow to automate a large part of some analysis tasks and I'd like to introduce them to a larger audience with the hope that they will find them useful.pefile http://dkbza.org/pefile.html• pefile is a multi-platform full Python module intended for handling PE Files. It should be able to process any file that can be open by the Windows loader.• pe