A powerful Python tool for analyzing Windows executable files (.exe) to detect programming languages, compilers, and extract detailed metadata.
- Language & Compiler Detection: Identifies C++, C#/.NET, Python, Go, Rust, Delphi, and more
- Hash Calculation: MD5, SHA1, and SHA256 checksums
- Section Analysis: Entropy calculation and characteristic analysis
- Packer Detection: Identifies UPX, ASPack, Themida, and other packers/protectors
- Import/Export Analysis: Lists all imported DLLs and exported functions
- Resource Extraction: Analyzes embedded resources (icons, versions, manifests, etc.)
- String Extraction: Finds URLs, file paths, registry keys, and interesting keywords
- Anomaly Detection: Identifies suspicious characteristics
- Digital Signature Check: Verifies if the file is digitally signed
- Python 3.6 or higher
- Windows OS (for analyzing Windows executables)
- Clone the repository:
git clone https://github.com/piplarsson/exe-file-analyzer.git
cd exe-file-analyzer- Install dependencies:
pip install -r requirements.txtpython exe_analyzer.py path/to/your/file.exepython exe_analyzer.py
# Then enter the path when promptedThe analyzer provides detailed information in a formatted console output:
- Basic file information (size, hashes, compile time)
- Detected programming language/compiler
- PE sections with entropy analysis
- Imported DLLs and functions
- Embedded resources
- Extracted strings (URLs, paths, registry keys)
- Potential anomalies
- Visual C++ (all versions from 6.0 to 2022)
- C#/.NET Framework (all versions)
- Python (PyInstaller, py2exe)
- Go
- Rust
- Delphi/Borland
- MinGW/GCC
- AutoIt
- Java/JAR
- Electron/Node.js
- Qt Framework
If you don't want to install Python, you can download the standalone .exe version from the Releases page.
Contributions are welcome! Feel free to:
- Report bugs
- Suggest new features
- Submit pull requests
This project is open source. Feel free to use and modify as needed.
Created by Piplarsson
Note: This tool is for educational and analysis purposes. Always respect software licenses and copyrights when analyzing executable files.