PEHASH(1)

📦
version 0.85.1 · 2 versions
, in alpine 3.24, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💅 PEHASH(1) — like, the manual page but make it cute

okay bestie, welcome to pehash, straight outta the General Commands Manual section 1. this is the page for the tool, and i'm gonna walk you through it like we're texting at 2am. no gatekeeping. periodt. ✨

🌸 NAME 🌸

pehash — calculate hashes of PE pieces 🧚

🎀 SYNOPSIS 🎀

pehash [OPTIONS]...  pefile

🦋 DESCRIPTION 🦋

so, pehash uses libssl, libfuzzy and other black magic 🪄 to calculate PE file hashes. it's part of pev, the PE file analysis toolkit. it's giving main character energy in a whole suite of tools, iykyk.

pefile is a PE32/PE32+ executable or dynamic linked library file. that's it. that's the input. 🫶

✨ OPTIONS ✨

  • -a, --all — hash the file, the sections AND the headers with md5, sha1, sha256, ssdeep and imphash. literally everything. the full deluxe package 🔥
  • -c, --content — hash only the file content. this is the default btw, so if you do nothing, this is what you get 💖
  • -f, --format <text|csv|xml|html> — change the output format. default is text. pick your aesthetic ✨
  • -h, --header <dos|coff|optional> — hash only the header with the specified name. yes, only the one you named, no extras 🙈
  • -s, --section <section_name> — hash only the section with the specified name. very specific of you, love that 💅
  • --section-index <section_index> — hash only the section at the specified index, and the index range is 1..n. numbers only bestie, no vibes-based indexing 🌈
  • -V, --version — show version 👑
  • --help — show this help 🆘
ngl, no option means it defaults to --content mode. so pehash pefile and pehash -c pefile are the same vibe. 😌

🍓 EXAMPLES 🍓

check ALL the supported checksums of putty.exe, because why choose one:

$ pehash -a putty.exe

ate. no crumbs. 💀✨

😭 REPORTING BUGS 😭

bestie if something's broken, pls check the latest development code first and then report at https://github.com/mentebinaria/readpe/issues. we're not mad, we're just disappointed (jk we love you) 🫶

👑 SEE ALSO 👑

ofs2rva(1), pedis(1), peldd(1), pepack(1), peres(1), pescan(1), pesec(1), pestr(1), readpe(1), rva2ofs(1)

the whole friend group 💖 go say hi.

Copyright (C) 2012 - 2020 pev authors. License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law.

there is NO WARRANTY. to the extent permitted by law. fr fr. don't come for us 💀

and that's the whole page bestie — it lives in the General Commands Manual as PEHASH(1), and the footer says PEHASH(1) too, so we've come full circle. stay hashing, stay iconic 🎀🦋✨
📦 where this page comes from