PESCAN(1)

📦
version 0.85.1 · 2 versions
, in alpine 3.24, debian trixie, ubuntu noble, ubuntu questing, ubuntu resolute, ubuntu stonking

💅 PESCAN(1) — like, the general commands manual, but make it cute

okay bestie, welcome to pescan — she lives in section 1 of the manual (general commands, the classics ✨), and she's here to sniff out sus stuff in your PE files. no cap.

🎀 NAME 🎀

pescan — she spots suspicious characteristics hiding inside PE files. that's it, that's the job. 👑

✨ SYNOPSIS ✨

pescan [OPTIONS]...  pefile

literally just hand her some options (if you want) and a pefile and she goes to work. 💖

🦋 DESCRIPTION 🦋

so pescan does a static analysis on a PE file to figure out if it's got suspicious characteristics in it. no running it, no executing it, no drama — she just looks. 🔍✨

she's part of pev, the PE file analysis toolkit — so she's got sisters, and yes they're all in SEE ALSO, we'll get there. 🫶

and what even is pefile? it's a PE32/PE32+ executable or dynamic linked library file. so like, a .exe or a .dll basically. iykyk. 💅

🌸 OPTIONS 🌸

  • -f, --format <text|csv|xml|html> — changes the output format. the default is text, bestie, so if you don't say anything she'll just talk to you in plain text. want csv, xml, or html instead? say the word. 🎀
  • -v, --verbose — show more information about the items she found. she found stuff and now she's gonna yap about it in detail. obsessed. 🔥
  • -V, --version — shows the version. quick lil vibe check on which build you're running. ⭐
  • --help — shows help. the classic. the icon. when in doubt, ask for help. 🙈

🍓 EXAMPLES 🍓

searching for suspicious things in putty.exe, as one does:

$ pescan putty.exe

she runs, she scans, she tells you what's up. periodt. 💜

😭 REPORTING BUGS 😭

please please PLEASE check the latest development code first, and then report at:

https://github.com/mentebinaria/readpe/issues

(that's the whole link, don't be shy, click it.) 🌈

👑 SEE ALSO 👑

the whole squad, fr fr:

ofs2rva(1), pedis(1), pehash(1), peldd(1), pepack(1), peres(1), pesec(1), pestr(1), readpe(1), rva2ofs(1)

go read them too, they ate. 💅✨

Copyright (C) 2013 - 2020 pev authors.

License GPLv2+: GNU GPL version 2 or later <https://www.gnu.org/licenses/gpl-2.0.txt>.

this is free software: you are free to change and redistribute it.

There is NO WARRANTY, to the extent permitted by law. 🫠 like, none. zero. ngl that part is important, bestie.

and that's the whole page!! 💖✨🎀🦋🌸💅🫶

cute lil sign-off: this was PESCAN(1) — yes, the footer literally just says PESCAN(1) again, she's lowkey self-obsessed and honestly? valid. 👑 the source is the General Commands Manual and the date/version deets live in the copyright line above (2013 – 2020, pev authors). bye bestie, go scan something. 😭💜

📦 where this page comes from