Malware is often hidden in Windows Portable Executable (PE) format, and this PE analysis tool can be useful here. Outside of showing information about binary and executable files, this piece of ...

The malware was discovered running inside the dllhost.exe process under PID 8200. Its Portable Executable (PE) and DOS headers, crucial for identifying and reconstructing malware files, had been ...

Symantec researchers found a backdoor program that abuses the Encrypting File System feature on Windows in an attempt to defeat researchers' analysis efforts.

BlackBerry open-sources PE Tree, a new malware reverse-engineering tool for analyzing Portable Executable (PE) files.

“During our analysis of these malware samples, we have identified that some of the malware samples belonged to Qbot and Lokibot attempting to execute .OCX files…97 percent of these samples ...

Google researchers spotted malware developers creating malformed code signatures seen as valid in Windows to bypass security software.

In July 2012, our virus laboratory came across what we first thought was a new family of malware. The threat spread by infecting Portable Executable or PE files used by Windows, but this malware ...