Jump to content
Tuts 4 You

PE section question

Guest SkyHigh

Recommended Posts

that should be ok, if you are planning to inject the sectoin after the section table and before the first section.


However, you might want to grab the start of the first section from the actual section table (if possible, keep in mind that section tables arent necessarely in order...).

That way, you can work around faulty values for sizeofheaders, although the windows loader ensures that the value is roughly in the right range.


you will want to check fora minimal size, thouhg:

(...) >= hsize - sizeof(image_section_header)

in order to have enough space for a section header and purely virtual section.

Link to comment
This topic is now closed to further replies.
  • Create New...