PE executables

PE executables are programs that work on Windows. Executable files have the .exe extension. Dynamic link libraries uses the same PE file format and use the .dll file extension. Windows device driver programs, also in PE file format, use the .sys extension. There are also other extensions that use the PE file format, such as screensavers (.scr).

The PE file format has a header, which is divided into the MZ header, along with its DOS stub and the PE header, followed by the data directories and section tables, as shown here:

The file format follows the original MSDOS EXE format, but was extended for Windows using the PE header. ...

Get Mastering Reverse Engineering now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.