A packer for Windows x86 executable files that transforms and encrypts PE files to obstruct reverse engineering.
PE-Packer is a Windows x86 executable file packer written in C and Intel x86 Assembly. It transforms and encrypts Portable Executable (PE) files to obstruct reverse engineering by obfuscating import tables, encrypting sections, and adding a runtime decryption loader. The tool is designed as a demo for studying PE format and assembly language, not for practical production use.
Beginners and students interested in learning Windows PE file structure, assembly programming, and basic reverse engineering techniques. It is also relevant for security enthusiasts exploring executable protection methods.
Developers choose PE-Packer for its educational value, providing hands-on experience with low-level Windows executable manipulation and obfuscation techniques without the complexity of commercial packers. Its open-source nature allows for easy study and modification.
🗜️ A packer for Windows x86 executable files written in C and Intel x86 Assembly. The new file after packing can obstruct reverse engineering.(使用C和Intel x86汇编开发的Windows x86可执行文件打包工具,打包后的新文件可以阻碍逆向工程。)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Explicitly designed for beginners to study Windows PE format and assembly language, providing practical, low-level insights into executable manipulation as stated in the README.
Implements import table transformation and section encryption, which hinder disassembly and static analysis, as shown in the before-and-after screenshots in the README.
Released under the MIT License, allowing full access to the C and assembly code for customization and learning, emphasizing transparency over production use.
The README directly warns of compatibility problems and bugs, stating it 'cannot be used in practice,' limiting it to educational demos only.
Requires specific tools like MASM32, MinGW-w64 for i686, and CMake, making setup complex and confined to 32-bit Windows, as detailed in the prerequisites.
Lacks advanced obfuscation features like anti-debugging or polymorphism, focusing only on basic transformations, which reduces its utility beyond introductory learning.