Exeinfo PE

Exeinfo PE is a free tool that examines Windows executable files and shows which compiler, packer or protector was used to build them. It displays the properties of any .exe or .dll file, such as the entry point, file offset, linker info, sections and overlay, and gives hints on how a packed file can be unpacked. Its menus also include file operations: you can rename a file, copy it as a backup, run it, or delete it. Exeinfo PE also shows the size of the file and of the overlay data appended to the executable.

Features:

• Exeinfo PE can be used on any executable to detect packers, compressors, compilers and .NET obfuscators, as well as installers and archives.
• Exeinfo PE is portable, so you do not need to install it. It is distributed as a ZIP archive, and you can easily put it on a flash drive or other portable drive without issue.
• The interface is a small window with buttons for its tools. You can drag and drop files onto it, and a menu links to external tools such as CFF Explorer, Protection ID, Universal Extractor and TrID.
• Exeinfo PE makes viewing details of a .exe file simple. You can view the entry point, file size, first bytes, subsystem, section flags (executable, readable, writable) and header information, and it also detects Android, Linux, Mac OS and Symbian files.

Exeinfo PE shows at a glance how an executable was built or packed and gives hints on how it can be unpacked.

Exeinfo PE is a useful tool for examining executable files. The application runs smoothly and uses few system resources. The interface is compact and familiar; however, to really use Exeinfo PE it helps to know how executable files and packers work. It can also send the SHA256 hash of a file to online scanners such as VirusTotal. Overall, Exeinfo PE is free software by A.S.L that provides what you need to inspect the workings of Windows executable files.