# Hidden Bee IDA loader > Hidden Bee IDA loader imports the malware family's stripped-down PE-like payload format into IDA for binary analysis. It creates segments, assigns import names and types, and processes relocation information so the database can be rebased. The author also documents examining IDA's pe.dll loader to work out its import and relocation handling. - Type: Tool - Targets: Binary - Category: Native analysis tools - Relationship: Foundation tool - Sources reviewed: 2026-11-09 - Added to the catalog: 2026-11-09 - Original resource: - Catalog page: - Record JSON: - Chinese version: [简体中文](https://awesomerea.org/zh/resources/hidden-bee-ida-loader/index.md) ## Requirements & limits - **Prerequisites:** IDA with IDAPython and the pefile Python module is required. - **Scope:** The loader targets the Hidden Bee custom payload format. - **License:** No licence stated on the project page. ## Primary sources 1. ## More in Native binaries - [OpenAllegroParser](https://awesomerea.org/resources/openallegroparser/index.md) · Tool - [LogicX Analyzer](https://awesomerea.org/resources/logicx-analyzer/index.md) · Tool - [FunctionParser](https://awesomerea.org/resources/functionparser-xenonrecomp/index.md) · Tool - [hyperscan-emulator](https://awesomerea.org/resources/hyperscan-emulator/index.md) · Tool - [AppleWin](https://awesomerea.org/resources/applewin-symbolic-debugger/index.md) · Tool - [PyFLP](https://awesomerea.org/resources/pyflp/index.md) · Tool ## About this entry The description was reviewed against primary sources. Original editorial content: MIT. Linked projects, papers and assets retain their own rights and licenses.