# PortexAnalyzerGUI | Graphical Interface For PortEx, A Portable Executable And Malware Analysis Library

**URL:** <https://onehack.st/t/portexanalyzergui-graphical-interface-for-portex-a-portable-executable-and-malware-analysis-library/234833>\
**Category:** Tools & Scripts\
**Tags:** learning, tools, programming\
**Created:** [March 23, 2023, 2:10am UTC](https://onehack.st/t/portexanalyzergui-graphical-interface-for-portex-a-portable-executable-and-malware-analysis-library/234833 "2023-03-23T02:10:35Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![NoBody](https://onehack.st/user_avatar/onehack.st/nobody/32/163880_2.png) [@NoBody](https://onehack.st/u/NoBody)\
**Post date:** [March 23, 2023, 2:10am UTC](https://onehack.st/t/portexanalyzergui-graphical-interface-for-portex-a-portable-executable-and-malware-analysis-library/234833/1 "2023-03-23T02:10:35Z")

</div>

# PortexAnalyzerGUI

Graphical interface for PortEx, a Portable Executable and Malware Analysis Library

[![visualizer example](https://github.com/struppigel/PortexAnalyzerGUI/raw/main/resources/screenshot.png)](https://github.com/struppigel/PortexAnalyzerGUI/raw/main/resources/screenshot.png)

[![visualizer example](https://github.com/struppigel/PortexAnalyzerGUI/raw/main/resources/screenshot2.png)](https://github.com/struppigel/PortexAnalyzerGUI/raw/main/resources/screenshot2.png)

## Download

[Releases page](https://github.com/struppigel/PortexAnalyzerGUI/releases)

## Features

- Header information from: MSDOS Header, Rich Header, COFF File Header, Optional Header, Section Table
- PE Structures: Import Section, Resource Section, Export Section, Debug Section
- Scanning for file format anomalies
- Visualize file structure, local entropies and byteplot, and save it as PNG
- Calculate Shannon Entropy, Imphash, MD5, SHA256, Rich and RichPV hash
- Overlay and overlay signature scanning
- Version information and manifest
- Icon extraction and saving as PNG
- Customized signature scanning via Yara. Internal signature scans using PEiD signatures and an internal filetype scanner.

## Supported OS and JRE

I test this program on Linux and Windows. But it should work on any OS with JRE version 9 or higher.

## Future

I will be including more and more features that PortEx already provides.

These features include among others:

- customized visualization
- extraction and conversion of icons to .ICO files
- dumping of sections, overlay, resources
- export reports to txt, json, csv

Some of these features are already provided by PortexAnalyzer CLI version, which you can find here: [PortexAnalyzer CLI](https://github.com/struppigel/PortEx/tree/master/progs)

## Donations

I develop PortEx and PortexAnalyzer as a hobby in my free time. If you like it, please consider buying me a coffee: [https://ko-fi.com/struppigel](https://ko-fi.com/struppigel)

## Author

Karsten Hahn

Twitter: [@Struppigel](https://twitter.com/struppigel)

Mastodon: [struppigel@infosec.exchange](https://infosec.exchange/@struppigel)

Youtube: [MalwareAnalysisForHedgehogs](https://www.youtube.com/c/MalwareAnalysisForHedgehogs)

## License

[License](https://github.com/struppigel/PortexAnalyzerGUI/blob/main/LICENSE)

## GitHub:

[https://github.com/struppigel/PortexAnalyzerGUI](https://github.com/struppigel/PortexAnalyzerGUI)