PE-bear is a freeware reversing tool for PE files. Its objective was to deliver fast and flexible “first view” tool for malware analysts, stable and capable to handle malformed PE files.
NOTE: I am sorry, but PE-bear is no longer developed. I will not be adding any new features etc. However, due to the fact that there are still many people who use it, I decided to do bugfixes whenever necessary. In the future, I am planning to replace PE-bear with a new, improved tool of similar capabilities.
The PE-bear’s parser is open source: https://github.com/hasherezade/bearparser (works for windows and linux). It comes with a command-line tool (bearcommander). I am looking forward to hear any remarks!
