Portable executable format

The Portable Executable Format is used by Windows to store executable code. The format is also used to store other types of data, e.g. like Multilingual User Interface (MUI) strings and EventLog messages.

See Also

• Windows Event Log (evt)
• Windows XML Event Log (evtx)

External Links

• Wikipedia: Portable Executable
• PE and COFF Specification, by Microsoft
• Blog about pefile, by Ero Carrera
• Executable (EXE) file format, by the libexe project, October 2011

Tools

• pefile is a Python module to read and work with PE (Portable Executable) files, by Ero Carrera

Resources

• Resource Hacker, by Angus Johnson