Fileinfo

Czech title

Fileinfo - nástroj pro detekci použitého překladače či packeru

Type

software

License

required - optional free

Authors

Křoustek Jakub, Ing. (DIFS FIT BUT)
Zavoral Milan, Bc. (FIT BUT)
Kolář Dušan, doc. Dr. Ing. (DIFS FIT BUT)

Keywords

compiler detection, packer detection, reverse engineering, executable file, WinPE, ELF, Lissom

Description

Fileinfo can be used for detection of compiler/packer used for creation of input binary executable file. Its input is such file in one of the supported formats (e.g. WinPE, ELF). Its output is information about the originally used tool and basic information about the file itself (e.g. target architecture, number of sections, endianness).

Projects

System for Support of Platform Independent Malware Analysis in Executable Files (TA01010667)

Research groups

Hardware-Software Codesign research group (VZ LISSOM)

Departments

AVG Technologies CZ (AVG)
Department of Information Systems FIT BUT (DIFS FIT BUT)