b0mbh2k Posted August 12, 2009 Posted August 12, 2009 Guyzz, how to view or judge the sample, whether its dll or exe or any other file into hex editor?
atom0s Posted August 14, 2009 Posted August 14, 2009 The file header structure inside of a PE file contains a field called 'Characteristics' which holds a flag that shows if the file is an executable or a DLL.Check this site out for some more info and some example code: (In C/C++)http://www.skynet.ie/~caolan/publink/winresdump/winresdump/doc/pefile.html
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now