2

Can the signatures from PeID be used on 64-Bit Portable Executable (EXE) files? PeID does not support 64-Bit files but I can use the signatures in another application with 64-Bit support.

My main interest is detecting 64-Bit EXE files that are packed. This question is related to another question I have:

Detecting packed 64-bit Windows Portable Executable (EXE) files

1 Answer 1

2

PEiD rules are only patterns, you can use them on whatever fileformat you want. Since PEiD is not maintained anymore, you may want to export your rules to another format, like yara.

1
  • So would the the same packer have the same pattern on both 32-bit and 64-bit files or would the pattern change?
    – Raphael
    Nov 24, 2014 at 9:00

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.