- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Relocations
- Debugs
- Load config
- Bound imports
- IAT
Dos Header
| Member | Value | Comment |
|---|---|---|
| AddressOfNewEXEHeader | 0xd8 | |
| AddressOfRelocationTable | 0x40 | |
| BytesOnLastPageOfFile | 0x90 | |
| Checksum | 0x0 | |
| InitialCS | 0x0 | |
| InitialIP | 0x0 | |
| InitialSP | 0xb8 | |
| InitialSS | 0x0 | |
| Magic | 0x5a4d | |
| MaxExtraParagraphsNeeded | 0xffff | |
| MinExtraParagraphsNeeded | 0x0 | |
| OEMIdentifier | 0x0 | |
| OEMInformation | 0x0 | |
| OverlayNumber | 0x0 | |
| PagesInFile | 0x3 | |
| Relocations | 0x0 | |
| ReservedWords1 | 0,0,0,0 | |
| ReservedWords2 | 0,0,0,0,0,0,0,0,0,0 | |
| SizeOfHeader | 0x4 |