{
  "added_at": "2026-11-09",
  "category": "binary-libraries",
  "description_en": "Inspect PE headers, sections, resources and malformed values through a Python API with limited in-place editing.",
  "description_zh": "通过 Python API 检查 PE 头、节、资源及异常字段值，并进行有限的原位编辑。",
  "entry_url": "https://awesomerea.org/resources/pefile/",
  "entry_url_zh": "https://awesomerea.org/zh/resources/pefile/",
  "evidence_url": "https://github.com/erocarrera/pefile/blob/274e0b8ce0b804a09a3cb68314f41b00ae2ed8a0/README.md",
  "group": "tools",
  "id": "pefile",
  "json_url": "https://awesomerea.org/resources/pefile/record.json",
  "kind": "tool",
  "markdown_url": "https://awesomerea.org/resources/pefile/index.md",
  "markdown_url_zh": "https://awesomerea.org/zh/resources/pefile/index.md",
  "name": "pefile",
  "name_zh": "pefile",
  "record_type": "resource",
  "relationship": "foundation",
  "requirements": [
    "Install pefile with Python 3; the module is self-contained and documents Windows, macOS and Linux operation. Understanding the PE layout is needed to interpret its structures.",
    "Its editing helpers do not rearrange PE structures to make room for new fields. Signature verification is referred to a separate project."
  ],
  "requirements_zh": [
    "使用 Python 3 安装 pefile；该模块无需额外运行依赖，文档列出 Windows、macOS 和 Linux。解释其结构需要理解 PE 布局。",
    "编辑辅助方法不会重新排列 PE 结构来为新字段腾出空间。签名验证由文档指向的独立项目处理。"
  ],
  "targets": [
    "binary"
  ],
  "url": "https://github.com/erocarrera/pefile",
  "verification": "source-reviewed",
  "verified_at": "2026-10-29"
}