PE Header Summary
Decode a Windows PE executable header from hex: machine, timestamp, characteristics, the optional header, and the section table.
This tool handles input and primary processing in your browser and is designed not to send the input to QuickKit’s server.
How it works
Paste the start of a PE file (.exe / .dll / .sys) as hex — enough to cover the DOS header, the PE signature at e_lfanew, the COFF file header, the optional header, and as many 40-byte section headers as you want summarised. Layout and constants follow the Microsoft PE Format specification (checked 2026-09-01); PE integers are little-endian. Only the fields that share a layout between PE32 and PE32+ are decoded, plus the section table. Each optional-header field is read only when it fits inside SizeOfOptionalHeader and the supplied bytes, so section-table bytes are never misread as header fields. A ROM optional header (magic 0x107) shows only the standard COFF fields; the Windows-specific fields are not defined for it. Imports, exports, resources, relocations, and data directories are not parsed, RVAs are not followed, and no security judgement is made. Missing trailing bytes produce notes, not errors. Nothing is transmitted.