'PE Section Flags

For example Characteristics of section .text is 60000020, seems that is

IMAGE_SCN_CNT_CODE  0x00000020
IMAGE_SCN_MEM_EXECUTE   0x20000000
IMAGE_SCN_MEM_READ  0x40000000

How to clearly identify which characteristics hide this field?

javamemoryportable-executable


Solution 1:[1]

if 60000020&IMAGE_SCN_CNT_CODE==IMAGE_SCN_CNT_CODE mean's 60000020 have 0x20.

Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source
Solution 1 moshui Z

Related Questions