pefile_parse_pe_sections_and_imports_quickstart.py

1import pefile
2
3# Load the PE file
4pe = pefile.PE('/path/to/executable.exe')
5
6# Iterate over all sections and print some information about them
7for section in pe.sections:
8    print(section.Name.decode().rstrip('\x00'), hex(section.VirtualAddress),
9          hex(section.Misc_VirtualSize), section.SizeOfRawData)
10
11# If the PE file has import information, print it
12if hasattr(pe, 'DIRECTORY_ENTRY_IMPORT'):
13    for entry in pe.DIRECTORY_ENTRY_IMPORT:
14        print(entry.dll.decode())
15        for imp in entry.imports:
16            print('\t', hex(imp.address), imp.name.decode() if imp.name else ord('?'))