Investigate PE files - reuteras/dfirws GitHub Wiki

Included tools (not a complete list).

• PE-Bear
• capa

Read more in:

• Notebook for PE with Ghidra and capa