table of contents
PEHASH(1) | General Commands Manual | PEHASH(1) |
NAME¶
pehash - calculate hashes of PE piecesSYNOPSIS¶
pehash [OPTIONS]... pefileDESCRIPTION¶
pehash uses libssl, libfuzzy and other black magic to calculate PE file hashes. It's part of pev, the PE file analysis toolkit.pefile is a PE32/PE32+ executable or dynamic linked library file.
OPTIONS¶
- -a, --all
- hash file, sections and headers with md5, sha1, sha256, ssdeep and imphash
- -c, --content
- hash only the file content (default)
- -f, --format <text|csv|xml|html>
- change output format (default is text).
- -h, --header <dos|coff|optional>
- hash only the header with the specified name.
- -s, --section <section_name>
- hash only the section with the specified name.
- --section-index <section_index>
- hash only the section at the specified index (1..n).
- -V, --version
- show program version and exit.
- --help
- show help.
EXAMPLES¶
Check all supported checksums of putty.exe file:- $ pehash -a putty.exe