PE File Plugin

class chepy_pefile.PEFile(*data)

This plugin allows Chepy to interface with PE file formats

pe_exports()

Get all the exports from a PE file

Returns:The Chepy object.
Return type:ChepyPlugin

Examples

>>> c = Chepy("tests/files/ff.exe").read_file().pe_exports().o
   {
        b'KERNEL32.dll': {
            b'AcquireSRWLockExclusive': '0x140051ff8',
            b'AssignProcessToJobObject': '0x140052000',
            b'AttachConsole': '0x140052008',
            ...
        b'ntdll.dll': {
            ...
        }
    }
pe_get_certificates()

Get certificates used to sign pe file

Returns:The Chepy object.
Return type:ChepyPlugin

Examples

>>> Chepy("tests/files/ff.exe).read_file().pe_get_certificates().o
[
    {
        'version': 2,
        'serial': 17154717934120587862167794914071425081,
        'algo': b'sha1WithRSAEncryption',
        'before': b'20061110000000Z',
        'after': b'20311110000000Z',
        'issuer': {
            'C': 'US',
            'ST': None,
            'L': None,
            'O': 'DigiCert Inc',
            'OU': 'www.digicert.com',
            'CN': 'DigiCert Assured ID Root CA',
            'email': None
        },
        ...
    ...
}
pe_imports()

Get all the imports from a PE file

Returns:The Chepy object.
Return type:ChepyPlugin