Match Column A with Column B by annotating the letter from Column B i.pdf
- 1. Match Column A with Column B by annotating the letter from Column B in the blank in Column A. Column A 1. The PE format helps the 2. The two main components that comprise the PE file includes 3. The Section Header Table and its sections that comprise it 4. Data Directories are 5. PE Headers contains Column B a. define how the binary is mapped in memory. b. the internal structure of all Windows executables (e.g., exe, dll, etc). c. technical information about the file. d. used by applications instead of physical memory. e. Windows OS interpret and manage the executable (image) file, and an understanding of the PE format is essential to malware reverse engineering. f. pointers to exported and imported resources in tables with the relevant exported and imported resource information. g. Headers (technical information about the exe file) and Sections (contents of the exe file). h. contents of the executable to include the code that is executed, links between the PE file and imported Windows resources (e.g. DLL), and data used by the code. i. based upon Windows PE format that is described in the ECMA-335 standard. j. designates a location within a file.