I have been looking around quite a bit on the internet for something that could tell me more than basic section on a binary.

I have a PE file and usually I see just what compiled it (MSVS or GCC ... ect ), but not necessarily if the file was compiled on a Russian file system. I ran strings on it and I see lots of items thrown in by the compiler.

Is there a way to see what the file was compiled on or anything to identify my authors?

I hope this makes sense. Let me know if you need anymore info please.



Code and binary is really, really hard. People who say it's easy are either stupid or want to sell you something. On the other hand, it's relatively easy if the code in question is created by a completely naive person or they really don't give a damn if it being attributed to them.

For general education try some results of this search https://www.google.com.au/search?q=attribution+in+infosec+is+hard

PS I recall seeing some research in attributing code and even binaries (at least to compilers) based on statistical methods, but I cannot recall where. Perhaps I imagined it.

Not the answer you're looking for? Browse other questions tagged or ask your own question.