PEiD - Detect Packets, Cryptors, and Compilers in PE Executable Files

PEiD is an intuitive application that relies on its user-friendly interface to detect packers, cryptors, and compilers found in PE executable files – its detection rate is higher than that of other similar tools since the app packs more than 600 different signatures in PE files.

Key Features:

• Three different scanning methods: Normal, Deep Mode, and Hardcore Mode


• Access functions via command-line


• Explore and terminate currently running processes


• Batch processing support


• HEX viewer and task manager

Scanning Methods

PEiD comes with three different scanning methods, each suitable for a distinct purpose:

• Normal: Scans the user-specified PE file at its Entry Point for all its included signatures


• Deep Mode: Increased detection ratio by scanning the file's Entry Point containing section


• Hardcore Mode: Scans the entire file for all the documented signatures

Functionality

In addition to the intuitive interface of PEiD, its functions can also be accessed via command-line, and the detailed documentation can help users get familiarized with the proper commands and parameters.

Users can explore all the currently running processes and terminate them with a single mouse click. PEiD allows dumping a module, scanning the dumped image, or analyzing the dependent modules of a process. The best results can be obtained by analyzing each file separately, but batch processing is also supported.

Conclusion

All things considered, PEiD is a feature-packed application that can scan PE files and identify packers and compilers, while also featuring a HEX viewer and a task manager.