All geek questions in one place

Executable Partition Flag

In sections of Portable Executable files, the flags of differents are checked. Can someone explain the difference between IMAGE_SCN_MEM_EXECUTE (the section can be executed as code) and IMAGE_SCN_CNT_CODE (the section contains executable code)? Thank.

+3
source share
1 answer

IMAGE_SCN_MEM_EXECUTE is the one that is actually used by the PE loader to configure page permissions. IMAGE_SCN_CNT_CODE is not used, I think it's just a descriptive flag.

+2
source

Source: https://habr.com/ru/post/1769083/

More articles:


All Articles