# portable executable

Published articles for portable executable.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Writing a Debugger From Scratch - DbgRs Part 4 - Exports and Private Symbols

DevFeed: [Writing a Debugger From Scratch - DbgRs Part 4 - Exports and Private Symbols](<https://devfeed.tech/articles/writing-a-debugger-from-scratch-dbgrs-part-4-exports-and-private-symbols-39736.md>)

Original publisher: [Read original article](<https://www.timdbg.com/posts/writing-a-debugger-from-scratch-part-4/>)

Author: Tim Misiak

Published: 2023-05-29T22:28:40Z

Content type: tutorial

Language: en

Sources: [TimDbg](<https://devfeed.tech/sources/timdbg.md>)

Topics: [Code](<https://devfeed.tech/topics/code.md>), [debug](<https://devfeed.tech/topics/debug.md>), [Processes](<https://devfeed.tech/topics/processes.md>), [modules](<https://devfeed.tech/topics/modules.md>), [Parsing](<https://devfeed.tech/topics/parsing.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [debugger](<https://devfeed.tech/tags/debugger.md>), [modules](<https://devfeed.tech/tags/modules.md>), [parsing](<https://devfeed.tech/tags/parsing.md>), [portable-executable](<https://devfeed.tech/tags/portable-executable.md>), [process](<https://devfeed.tech/tags/process.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

Part 4 of a series on writing a debugger from scratch explains how to inspect a target process for loaded modules, exports, and private symbols. It covers tracking modules, mapping addresses to names, and beginning to parse Windows Portable Executable files.

### Source excerpt

(New to this series? Consider starting from part 1) At the end of the last post, we had the ability to read memory out of the target process, but we still had very little in the way of interpreting the data in that process. That changes in this post, where we will start grabbing useful information out of the target, including modules, exports, and even private symbols. The code for this post is in the part4 branch on github.

## How to Create a Malware Detection System With Machine Learning

DevFeed: [How to Create a Malware Detection System With Machine Learning](<https://devfeed.tech/articles/how-to-create-a-malware-detection-system-with-machine-learning-41262.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2019/05/22/How-to-create-a-Malware-detection-system-with-Machine-Learning/>)

Author: Simone Margaritelli

Published: 2019-05-22T21:59:13Z

Content type: tutorial

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Malware](<https://devfeed.tech/topics/malware.md>), [Machine Learning & Artificial Intelligence](<https://devfeed.tech/topics/machine-learning-artificial-intelligence.md>), [Neural Network](<https://devfeed.tech/topics/neural-network.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Code](<https://devfeed.tech/topics/code.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [antivirus](<https://devfeed.tech/tags/antivirus.md>), [binary-analysis](<https://devfeed.tech/tags/binary-analysis.md>), [classification](<https://devfeed.tech/tags/classification.md>), [computer-virus](<https://devfeed.tech/tags/computer-virus.md>), [cuda](<https://devfeed.tech/tags/cuda.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [deep-learning](<https://devfeed.tech/tags/deep-learning.md>), [deep-neural-networks](<https://devfeed.tech/tags/deep-neural-networks.md>), [deployment](<https://devfeed.tech/tags/deployment.md>), [dnn](<https://devfeed.tech/tags/dnn.md>), [ergo](<https://devfeed.tech/tags/ergo.md>), [feature-engineering](<https://devfeed.tech/tags/feature-engineering.md>), [features](<https://devfeed.tech/tags/features.md>), [gpu](<https://devfeed.tech/tags/gpu.md>), [how-to](<https://devfeed.tech/tags/how-to.md>), [keras](<https://devfeed.tech/tags/keras.md>), [machine-learning](<https://devfeed.tech/tags/machine-learning.md>), [malware](<https://devfeed.tech/tags/malware.md>), [malware-detection](<https://devfeed.tech/tags/malware-detection.md>), [neural-network](<https://devfeed.tech/tags/neural-network.md>), [neural-networks](<https://devfeed.tech/tags/neural-networks.md>), [nvidia](<https://devfeed.tech/tags/nvidia.md>), [portable-executable](<https://devfeed.tech/tags/portable-executable.md>), [security-research](<https://devfeed.tech/tags/security-research.md>), [tensorflow](<https://devfeed.tech/tags/tensorflow.md>), [tf](<https://devfeed.tech/tags/tf.md>), [windows-pe](<https://devfeed.tech/tags/windows-pe.md>)

### AI overview

A practical tutorial on using machine learning and artificial neural networks to detect Windows malware without relying on an explicit signatures database. It uses malware detection as an example for the ergo project, which automates parts of model creation, data encoding, GPU training, benchmarking, and deployment.

### Source excerpt

In this post we'll talk about two topics I love and that have been central elements of my (private) research for the last ~7 years: machi