diff --git a/malware-analysis_ref_and_memo.md b/malware-analysis_ref_and_memo.md
index af5d9d8..4e23fdf 100644
--- a/malware-analysis_ref_and_memo.md
+++ b/malware-analysis_ref_and_memo.md
@@ -112,3 +112,6 @@ to do...
 ### ref:
 - Intel系アーキテクチャSoftware Developer向けのマニュアル<br>
 [Intel® 64 and IA-32 Architectures Software Developer Manuals](https://software.intel.com/en-us/articles/intel-sdm)<br>
+- PEファイルのフォーマットについて
+[Inside Windows An In-Depth Look into the Win32 Portable Executable File Format, Part 1(2002)](http://bytepointer.com/resources/pietrek_in_depth_look_into_pe_format_pt1.htm)<br>
+[Peering Inside the PE: A Tour of the Win32 Portable Executable File Format(1994)](http://bytepointer.com/resources/pietrek_peering_inside_pe.htm)<br>