Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Parse Rich header #12889

Closed
Maijin opened this issue Jan 23, 2019 · 4 comments
Closed

Parse Rich header #12889

Maijin opened this issue Jan 23, 2019 · 4 comments
Labels
enhancement PE Portable Executable file format handling rabin2 RBin

Comments

@Maijin
Copy link
Contributor

Maijin commented Jan 23, 2019

Is your feature request related to a problem? Please describe.
Ability to output the Rich Header from PE File with ih or iH and the json output for Cutter

Additional context

The Rich header is an undocumented structure that appears in most of the PE files generated with the ‘LINK.EXE’ tool by Microsoft.

Here are some example of implementation/documentation:

@Maijin Maijin added enhancement RBin PE Portable Executable file format handling rabin2 labels Jan 23, 2019
@Maijin
Copy link
Contributor Author

Maijin commented Jan 23, 2019

ping @koffiedrinker

@koffiedrinker
Copy link
Contributor

I'll check it out.

@Maijin
Copy link
Contributor Author

Maijin commented Jan 24, 2019

More recent one https://github.com/RichHeaderResearch/RichPE

@Maijin
Copy link
Contributor Author

Maijin commented Mar 8, 2019

ping @koffiedrinker o/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement PE Portable Executable file format handling rabin2 RBin
Projects
None yet
Development

No branches or pull requests

2 participants