PE File Plugin¶
-
class
chepy_pefile.
PEFile
(*data)¶ This plugin allows Chepy to interface with PE file formats
-
pe_exports
()¶ Get all the exports from a PE file
Returns: The Chepy object. Return type: ChepyPlugin Examples
>>> c = Chepy("tests/files/ff.exe").read_file().pe_exports().o { b'KERNEL32.dll': { b'AcquireSRWLockExclusive': '0x140051ff8', b'AssignProcessToJobObject': '0x140052000', b'AttachConsole': '0x140052008', ... b'ntdll.dll': { ... } }
-
pe_get_certificates
()¶ Get certificates used to sign pe file
Returns: The Chepy object. Return type: ChepyPlugin Examples
>>> Chepy("tests/files/ff.exe).read_file().pe_get_certificates().o [ { 'version': 2, 'serial': 17154717934120587862167794914071425081, 'algo': b'sha1WithRSAEncryption', 'before': b'20061110000000Z', 'after': b'20311110000000Z', 'issuer': { 'C': 'US', 'ST': None, 'L': None, 'O': 'DigiCert Inc', 'OU': 'www.digicert.com', 'CN': 'DigiCert Assured ID Root CA', 'email': None }, ... ... }
-
pe_imports
()¶ Get all the imports from a PE file
Returns: The Chepy object. Return type: ChepyPlugin
-