Sweet! Sehr operativ.
Everything imo.
But I think its a bad idea to move the section header characteristics/flags into a subwindow. Now you have to click on every section separately to know if its r/w/e. I think its important information that should be available at one glace.
To be honest, I dont see the reason for the subwindow. I guess its there for additional space for additional info but there is really not that much info on section headers. I guess one could put entropy in there or maybe even draw a graph of it. I dont know. But the flags belong where they used to be. So one can see them all at once.
Its also kinda odd that they get sorted by size if you click on Name and wont sort by anything else. Well, when you first open the window, they are sorted 'normally'.
Now the Imported Libraries could profit from a subwindow with Imported Symbols in it...
With the debug and resource stuff, that was my mistake. PeStudio just leaves out some stuff.
I mean, it does not just plain parse stuff byte for byte and display it. Its picks some things and interprets or resolves it. I wont find IMAGE_DEBUG_DIRECTORY byte for byte anywhere, but I will find PdbFileName[] in Debug Information.
I guess it depends on the target audience. This one looks like its more for security semi/professionals, with the Indicators and VirusTotal integration, for a high level overview. So one might have no need or simply want all the details.
Everything imo.
But I think its a bad idea to move the section header characteristics/flags into a subwindow. Now you have to click on every section separately to know if its r/w/e. I think its important information that should be available at one glace.
To be honest, I dont see the reason for the subwindow. I guess its there for additional space for additional info but there is really not that much info on section headers. I guess one could put entropy in there or maybe even draw a graph of it. I dont know. But the flags belong where they used to be. So one can see them all at once.
Its also kinda odd that they get sorted by size if you click on Name and wont sort by anything else. Well, when you first open the window, they are sorted 'normally'.
Now the Imported Libraries could profit from a subwindow with Imported Symbols in it...
With the debug and resource stuff, that was my mistake. PeStudio just leaves out some stuff.
I mean, it does not just plain parse stuff byte for byte and display it. Its picks some things and interprets or resolves it. I wont find IMAGE_DEBUG_DIRECTORY byte for byte anywhere, but I will find PdbFileName[] in Debug Information.
I guess it depends on the target audience. This one looks like its more for security semi/professionals, with the Indicators and VirusTotal integration, for a high level overview. So one might have no need or simply want all the details.
