- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- Debugs
- Load config
- IAT
- Delay import
FileHeader
| Characteristics | 0x22 | 34 |
| Machine | 0x8664 | 34404 |
| NumberOfSections | 0x7 | 7 |
| NumberOfSymbols | 0x0 | 0 |
| PointerToSymbolTable | 0x0 | 0 |
| SizeOfOptionalHeader | 0xf0 | 240 |
| TimeDateStamp | 0x59f66ef8 | 1509322488 |
OptionalHeader
| AddressOfEntryPoint | 0xa960 | 43360 |
| BaseOfCode | 0x1000 | 4096 |
| CheckSum | 0x5b17e | 373118 |
| DataDirectory | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] |
| DllCharacteristics | 0xc160 | 49504 |
| FileAlignment | 0x1000 | 4096 |
| ImageBase | 0x140000000 | 5368709120 |
| LoaderFlags | 0x0 | 0 |
| Magic | 0x20b | 523 |
| MajorImageVersion | 0xa | 10 |
| MajorLinkerVersion | 0xe | 14 |
| MajorOperatingSystemVersion | 0xa | 10 |
| MajorSubsystemVersion | 0x6 | 6 |
| MinorImageVersion | 0x0 | 0 |
| MinorLinkerVersion | 0x1c | 28 |
| MinorOperatingSystemVersion | 0x0 | 0 |
| MinorSubsystemVersion | 0x0 | 0 |
| NumberOfRvaAndSizes | 0x10 | 16 |
| SectionAlignment | 0x1000 | 4096 |
| SizeOfCode | 0x21000 | 135168 |
| SizeOfHeaders | 0x1000 | 4096 |
| SizeOfHeapCommit | 0x1000 | 4096 |
| SizeOfHeapReserve | 0x100000 | 1048576 |
| SizeOfImage | 0x4f000 | 323584 |
| SizeOfInitializedData | 0x2d000 | 184320 |
| SizeOfStackCommit | 0x2000 | 8192 |
| SizeOfStackReserve | 0x80000 | 524288 |
| SizeOfUninitializedData | 0x0 | 0 |
| Subsystem | 0x2 | 2 |
| Win32VersionValue | 0x0 | 0 |