Files
securedorg.github.io/fundamentals2.md
2017-03-08 13:02:06 -08:00

742 B
Raw Blame History

layout, permalink, title
layout permalink title
default /RE101/section1.2/ Fundamentals

Go Back to Reverse Engineering Malware 101

Section 1.2: Fundamentals

Anatomy of a Windows PE C program

Typical windows programs are in the Portable Executable (PE) Format. Its portable because it contains information, resources, and references to dynamic-linked libraries (DLL) that allows windows to load and execute the machine code.

alt text

PE Header

Memory Layout

The Stack

Environment Setup <- Back | Next -> x86 Assembly