{"categories":[{"label":"Python Modules","url":"https://skillfed.io/packages/category/software-development-libraries-python-modules/3"}],"enrichment":{"capability":"pefile reads and parses Portable Executable (PE) files\u2014the binary format used for Windows executables, DLLs, and related binaries\u2014exposing their internal structures as Python object attributes.","skillfed_tags":["binary-analysis","reverse-engineering","malware-analysis"],"use_cases":["Analyze Windows executables and DLLs to extract metadata, imports, exports, and resource sections for security or compatibility audits.","Parse PE files in malware analysis workflows to inspect suspicious binaries for obfuscation, packing, or anomalous structures.","Automate binary inspection in build pipelines to validate executable structure, detect tampering, or extract version information.","Reverse-engineer or debug Windows binaries by examining their sections, entry points, and import tables programmatically.","Inspect PE files in forensic or incident-response contexts to understand binary composition and detect signs of compromise."],"what_it_does":"pefile is a pure-Python library for reading and analyzing Portable Executable (PE) files, the binary format underlying Windows executables, DLLs, and system libraries. It exposes PE internal structures\u2014headers, sections, import/export tables, resources\u2014as object attributes with both uppercase names for raw structures and lowercase names for processed elements like the import table. The library is designed to handle real-world edge cases including corrupted, malformed, and malware-obfuscated PE files that may violate the standard format.\n\nThe package has no runtime dependencies and installs as a pure Python wheel, making it lightweight and portable. It supports Python 3.6 and later, is actively maintained with recent commits, and has been battle-tested against malware and unusual PE variants since its initial release in 2016.","worth_installing":"Yes. pefile is a mature, actively maintained, zero-dependency library with a permissive license and no known vulnerabilities. It solves a specific and well-defined problem\u2014PE file parsing\u2014with proven robustness against edge cases and malware-crafted binaries. Install it if you need to analyze or inspect Windows executables programmatically."},"id":"pefile","links":{"html":"https://skillfed.io/packages/pefile","md":"https://skillfed.io/packages/pefile.md","pypi":"https://pypi.org/project/pefile/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2024-08-26","license_spdx":null,"license_treatment":"permissive","name":"pefile","python_support":"supports_current","summary":"Python PE parsing module"},"popularity":{"monthly_downloads":8372690,"position":1629,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"2024.8.26"}