I have been looking around quite a bit on the internet for something that could tell me more than basic section on a binary.

I have a PE file and usually I see just what compiled it (MSVS or GCC ... ect ), but not necessarily if the file was compiled on a Russian file system. I ran strings on it and I see lots of items thrown in by the compiler.

Is there a way to see what the file was compiled on or anything to identify my authors?

I hope this makes sense. Let me know if you need anymore info please.


closed as too broad by perror, Vitaly Osipov, NirIzr, peter ferrie, kn0x Oct 1 '17 at 15:05

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.


Code and binary is really, really hard. People who say it's easy are either stupid or want to sell you something. On the other hand, it's relatively easy if the code in question is created by a completely naive person or they really don't give a damn if it being attributed to them.

For general education try some results of this search https://www.google.com.au/search?q=attribution+in+infosec+is+hard

PS I recall seeing some research in attributing code and even binaries (at least to compilers) based on statistical methods, but I cannot recall where. Perhaps I imagined it.

Not the answer you're looking for? Browse other questions tagged or ask your own question.