b0mbh2k Posted August 12, 2009 Share Posted August 12, 2009 Guyzz, how to view or judge the sample, whether its dll or exe or any other file into hex editor? Link to comment
atom0s Posted August 14, 2009 Share Posted August 14, 2009 The file header structure inside of a PE file contains a field called 'Characteristics' which holds a flag that shows if the file is an executable or a DLL.Check this site out for some more info and some example code: (In C/C++)http://www.skynet.ie/~caolan/publink/winresdump/winresdump/doc/pefile.html Link to comment
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now