Saturday, December 6, 2025

NT Header - File Header

This is the file header of the COFF produced by the assembler after the compiler translate the C/C++ code to assembly language. 

The Machine field indicate the machine code type such as x86, x65 or ARM. 

TimeStamp contains the date time stamp when the compilation was executed. 

SizeOfOptionLHeader contains the size of the the Optional Header structure that follows. The value is fixed to either 0xE0 for 32.bit or 0xF0 for 64 bit. 

Characteristic field indicates the type of load module - is it 32 bit, a DLL or an executable. 

No comments: