Skip to content
0:00 / 0:00

#peformat#memorymapping#windowsloader

Malware Theory - Memory Mapping of PE Files

MalwareAnalysisForHedgehogs

30K subscribers • 11 videos on Hallway

YouTube
  • Recommended by 1 person: 1 in engineering communities.
  • Presented by Karsten, malware analyst

Intermediate. Assumes working knowledge.

12K views8 years ago1 recommendation

SecuritySystems programmingReverse engineeringOperating systems

Karsten explains how Portable Executable files are mapped into memory by the Windows loader and how to convert virtual addresses.

How are PE files mapped into memory? Malware analysis courses: malwareanalysis-for-hedgehogs.learnworlds.com/courses Buy me a coffee: ko-fi.com/struppigel Follow me on Twitter: twitter.com/struppigel

Why it's here

1 person recommends this

What people say. Recommended as a clear explanation of PE file memory mapping for reverse engineering.

u/TechLord2in r/ReverseEngineering • Recommends

Malware Theory - Memory Mapping of PE Files