File Header

0001-01-01 pe

The file headers (IMAGE_FILE_HEADER) contains information about a PE file’s sections, characteristics, and additional information.

typedef struct _IMAGE_FILE_HEADER {
  WORD  Machine;
  WORD  NumberOfSections;
  DWORD TimeDateStamp;
  DWORD PointerToSymbolTable;
  DWORD NumberOfSymbols;
  WORD  SizeOfOptionalHeader;
  WORD  Characteristics;
} IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;

This structure is documented here: https://learn.microsoft.com/en-us/windows/win32/api/winnt/ns-winnt-image_file_header


Links to this note