Live briefing
Everything about Portable Executable
Executable file format
Portable Executable (PE) is a file format for native executable code on 32-bit and 64-bit Windows operating systems, as well as in UEFI environments. It is used for native executables, dynamic link libraries, system drivers and many other types of files. The PE format supports storing the data required to load and start an operating system process – including references to dynamic link libraries, tables for importing and exporting application programming interface (API) functions, resource management data and thread-local storage (TLS) information. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Portable ExecutableA 5-minute orientation
- Skim a recent paper: An AI-Assisted All-in-One Integrated Coronary Artery Disease Diagnosis System Using a Portable Heart Sound Sensor With an On-Board Executable Lightweight ModelInfluential work since 2022
- Pick up a classic book: Technical CommunicationThe most-reprinted book on the subject
- Read the landmark paper: A learning model to detect maliciousness of portable executable using integrated feature setCited 70 times
- Go sideways: New ExecutableA closely related topic
- Go sideways: .exeA closely related topic
📖 Definitions
Noun A file format used for executable programs, DLLs, fonts, etc. in Microsoft Windows and some other operating systems.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
A learning model to detect maliciousness of portable executable using integrated feature set
Improving ransomware detection based on portable executable header using xception convolutional neural network
Dynamic Malware Classification and API Categorisation of Windows Portable Executable Files Using Machine Learning
Similarity hash based scoring of portable executable files for efficient malware detection in IoT
PROUD-MAL: static analysis-based progressive framework for deep unsupervised malware classification of windows portable executable
Ransomware early detection using deep reinforcement learning on portable executable header
Performance Evaluation of Filter-based Feature Selection Techniques in Classifying Portable Executable Files
Binary and multiclass malware classification of windows portable executable using classic machine learning and deep learning
🆕 Influential since 2022
An AI-Assisted All-in-One Integrated Coronary Artery Disease Diagnosis System Using a Portable Heart Sound Sensor With an On-Board Executable Lightweight Model
Impact of Portable Executable Header Features on Malware Detection燗ccuracy
Optimized feature representation and selection for malware detection using portable executable headers and machine learning
Ransomware Detection Using Portable Executable Imports
PE Parser: A Python package for Portable Executable files processing
📚 Books worth reading
Technical CommunicationJohn M. Lannon · 2000
Using MPIWilliam Gropp, Ewing Lusk · 1994
The casuistJohn Ambrose McHugh · 1906
The Portable MelvilleHerman Melville, Jay Leyda · 1952
Understanding object-oriented programming with JavaTimothy Budd · 1998
Managing Leadership Transition for NonprofitsBarry Dym, Susan Egmont · 2015
The trainer's portable mentorTerrence L. Gargiulo, Ajay M. Pangarkar · 2008- 📕Guarding of portable pipe threading machinesHealth & Safety Executive · 1977
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- New Executable The New Executable (NE or NewEXE) is a 16-bit executable file format, a successor to the DOS MZ executable format. It was used in Windows 1.0–3.x, Windows…
- .exe In Windows, OS/2, and DOS, .exe is the filename extension for a file that is runnable as a native executable computer program. Such a file is sometimes…
- Object file An object file is a file that contains machine code or bytecode, as well as other data and metadata, generated by a compiler or assembler from source code…
- UPX UPX (Ultimate Packer for eXecutables) is a free and open source executable packer supporting a number of file formats from different operating systems…
- COFF The Common Object File Format (COFF) is a format for executable, object code, and shared library computer files used on Unix systems. It was introduced…
- EFI system partition The EFI (Extensible Firmware Interface) system partition or ESP is a partition on a data storage device (usually a hard disk drive or solid-state drive)…
- Dynamic linker A dynamic linker is an operating system feature that loads and links dynamic libraries for an executable at runtime, before or while it is running. Although…
- Dynamic-link library Dynamic-link library (DLL) is Microsoft's implementation of the shared library concept in the Microsoft Windows and OS/2 operating systems. These libraries…