Name File::ReadPE Description File::ReadPE - Perl module to read/parse Windows PE file structures without using the Win32 API. This allows for Win32 image (ie, malware) analysis on any platform that supports Perl. This module retrieves relative portions of the following structures: IMAGE_DOS_HEADER IMAGE_FILE_HEADER IMAGE_NT_HEADER IMAGE_OPTIONAL_HEADER(32) IMAGE_DATA_DIRECTORY IMAGE_SECTION_HEADER The module also contains several functions to perform translation of 'characteristics' values from the various structures. SYNOPSIS Included in the POD DEPENDENCIES None INSTALLATION Plop the .pm file in the appropriate directory. On Windows systems, this would be C:\Perl\site\lib\File. AUTHOR Copyright 2006, H. Carvey