.Exe Files Analysis

Basic file information

file <file.exe>

strings <file.exe> | less

exiftool <file.exe>

Identify packer

die <file.exe>

Hash for reputation check

Search the Hash in Virus total

sha256sum <file.exe>

md5sum <file.exe>

PE metadata

exiftool <file.exe> | grep -i "original\|internal\|company"

Unpacking

if packed with UPX

upx -d <file.exe> -o unpacked.exe