Lock in $30 Savings on PRO—Offer Ends Soon! ⏳

[workshop] Exploring the Portable Executable fo...

Ange Albertini
September 13, 2013

[workshop] Exploring the Portable Executable format

44Con 2013
London, England

Ange Albertini

September 13, 2013
Tweet

More Decks by Ange Albertini

Other Decks in Technology

Transcript

  1. what about 64b? very few changes • 2 magic constants

    • a few elements become QWord ◦ ImageBase, Imports thunks, callbacks • Exceptions have their own DataDirectory ◦ no need for LoadConfig (SafeSEH)
  2. and ARM • a different magic constant • still 16b

    DOS Stub ! • nothing special, PE wise ◦ the beauty of ‘Portability’