- DOS Header
- NT Header
- Rich Header
- Sections
- Imports
- Resource
- Exceptions
- Certificate
- Relocations
- IAT
- Delay import
FileHeader
| Characteristics | 0x22 | 34 |
| Machine | 0x8664 | 34404 |
| NumberOfSections | 0x6 | 6 |
| NumberOfSymbols | 0x0 | 0 |
| PointerToSymbolTable | 0x0 | 0 |
| SizeOfOptionalHeader | 0xf0 | 240 |
| TimeDateStamp | 0x5ddb3374 | 1574646644 |
OptionalHeader
| AddressOfEntryPoint | 0x91458 | 595032 |
| BaseOfCode | 0x1000 | 4096 |
| CheckSum | 0xfbd19 | 1031449 |
| DataDirectory | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] | [object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object] |
| DllCharacteristics | 0x8140 | 33088 |
| FileAlignment | 0x200 | 512 |
| ImageBase | 0x140000000 | 5368709120 |
| LoaderFlags | 0x0 | 0 |
| Magic | 0x20b | 523 |
| MajorImageVersion | 0x0 | 0 |
| MajorLinkerVersion | 0x9 | 9 |
| MajorOperatingSystemVersion | 0x5 | 5 |
| MajorSubsystemVersion | 0x5 | 5 |
| MinorImageVersion | 0x0 | 0 |
| MinorLinkerVersion | 0x0 | 0 |
| MinorOperatingSystemVersion | 0x2 | 2 |
| MinorSubsystemVersion | 0x2 | 2 |
| NumberOfRvaAndSizes | 0x10 | 16 |
| SectionAlignment | 0x1000 | 4096 |
| SizeOfCode | 0x97200 | 619008 |
| SizeOfHeaders | 0x400 | 1024 |
| SizeOfHeapCommit | 0x1000 | 4096 |
| SizeOfHeapReserve | 0x100000 | 1048576 |
| SizeOfImage | 0xfa000 | 1024000 |
| SizeOfInitializedData | 0x60000 | 393216 |
| SizeOfStackCommit | 0x1000 | 4096 |
| SizeOfStackReserve | 0x100000 | 1048576 |
| SizeOfUninitializedData | 0x0 | 0 |
| Subsystem | 0x3 | 3 |
| Win32VersionValue | 0x0 | 0 |