August 2019
Intermediate to advanced
342 pages
9h 35m
English
The import table lists all of the symbols that need to be resolved and imported at load time from other DLLs:

Most types of benign software have a large number of entries in the import address table, because they have complex functions and import different Windows API functions from the import address table:

Windows also allows programs to load and unload DLLs explicitly using LoadLibrary and FreeLibrary, as well as to find the addresses of symbols using GetProcAddress (exposed by kernel32.dll).
Most types of malware ...
Read now
Unlock full access