-2

As a beginner i want to ask u some questions. Well , i'm not talking about all kinds of programs... i'm just asking for PE ( executables ) for windows -> (.exe) extension so , i don't know which tools should i use.

And what's the difference between :

IDA - Ollydbg - Immunity_Debugger - x64dbg

Thanks ^_^ ...

Improve this question

1 Answer 1

Reset to default
3

I'd suggest you to read Dennis Yurichev's book "Reverse Engineering for beginners". The answer to your specific question about tool difference is covered in chapter 7: IDA is a disassembler (a tool for static analysis of the code, intended to observe the code), and all the rest are debuggers (tools for dynamic analysis, intended to observe the code's behavior in action).

In general there are a lot of different tools depending on what exactly do you want to achieve:

Improve this answer
1
  • Plus every web page you can find on the PE format (some esoteric tidbits are quite rare). And be very confident in your assembler skills. And, for software for Windows, know enough about its APIs to be able to find what you are looking for on MSDN.
    – Jongware
    Jan 16, 2018 at 23:18

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.