I'm writing an experimental MASM32 application, and I'm wondering if you can reliably determine what compiler was used to compile a Portable Executable EXE or DLL. I've never seen a field like this in the PE headers.
I can't even imagine how this might be done,...
The most informative reference I've found is this from StackOverFlow: Determining Which Compiler Built a Win32 PE (http://stackoverflow.com/questions/764329/determining-which-compiler-built-a-win32-pe)
Google search: Signatures are used to determine the compiler used for the executable
https://www.google.com/?gws_rd=ssl#q=Signatures+are+used+to+determine+the+compiler+used+for+the+executable (https://www.google.com/?gws_rd=ssl#q=Signatures+are+used+to+determine+the+compiler+used+for+the+executable)
Check PEID application.
TWELL,
Thanks,...I'd never heard of PEID so I googled it. Lots of info,...
The reason I asked is that I'd like to be able to do it programmatically,...if it doesn't require an IQ greater than Spock's,...
There is no really reliable way of doing this. Some specialised tools can try and match binary characteristics to certain compilers but the 32 bit portable executable standard does not have a field to specify which compiler was used.
many compilers place strings in the .CONST section that identify them
but - assemblers/linkers don't normally do that :P
Quote from: HUTCHThere is no really reliable way of doing this. Some specialised tools can try and match binary characteristics to certain compilers but the 32 bit portable executable standard does not have a field to specify which compiler was used.
...Thanks, HUTCH,...that's kinda what I thought,...