is a tool created to help you view the components and data that is compiled in a compiled executable file.
It provides you with the means to view Dos and NT headers along with data directories. You are also offered information about the sections, load configs, imports, relocations, debug data and the embedded resources.
PE Lab displays a comprehensive interface. All the information is well organized and presented in detail making it easy to access and to navigate. The application displays data about the components such as offset, field, value, description, virtual address, RVA, size, referred section, the size of the raw data and the characteristics.
With the use of this application, you are able to analyze the loaded file and extract detailed information about it. You can view version related details such as the company name, file description, version, internal name and legal copyright. You also get info about its signature, size of code and of data, image base, OS version and the subsystem. With it you can also get a categorized view of the size of all the sections that compose the file.
For all the data that is made available by PE Lab, you can view and target HEX Dump. The hexadecimal view is displayed in a separate window that allows you to select a single block or the data entirely. Using the HEX viewer, you are also able to go to an offset and save the selection in a binary file.
Extracting resources from the EXE file is possible with the use of PE Lab. The items that give structure to the file are neatly displayed and sorted in sections that correspond to their formats and information that they posses. This way, it’s easy to find icons, images and strings.
PE Lab is by all means an efficient and effective tool that can definitely help you analyze the structure of compiled executable files in a simple way.