Class IMAGE_SECTION_HEADER
Represents the section header for one section.
Inherited Members
Namespace: PeNet.Structures
Assembly: PeNet.dll
Syntax
public class IMAGE_SECTION_HEADER : AbstractStructure
Constructors
| Improve this Doc View SourceIMAGE_SECTION_HEADER(Byte[], UInt32, UInt64)
Create a new IMAGE_SECTION_HEADER object.
Declaration
public IMAGE_SECTION_HEADER(byte[] buff, uint offset, ulong imageBaseAddress)
Parameters
Type | Name | Description |
---|---|---|
System.Byte[] | buff | A PE file as a byte array. |
System.UInt32 | offset | Raw offset to the section header. |
System.UInt64 | imageBaseAddress | Base address of the image from the Optional header. |
Properties
| Improve this Doc View SourceCharacteristics
Section characteristics. Can be resolved with
Declaration
public uint Characteristics { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |
ImageBaseAddress
Base address of the image from the Optional header.
Declaration
public ulong ImageBaseAddress { get; }
Property Value
Type | Description |
---|---|
System.UInt64 |
Name
Max. 8 byte long UTF-8 string that names the section.
Declaration
public byte[] Name { get; set; }
Property Value
Type | Description |
---|---|
System.Byte[] |
NameResolved
The section name byte array resolved to a string.
Declaration
public string NameResolved { get; }
Property Value
Type | Description |
---|---|
System.String |
NumberOfLinenumbers
The number of line-number entries for the section.
Declaration
public ushort NumberOfLinenumbers { get; set; }
Property Value
Type | Description |
---|---|
System.UInt16 |
NumberOfRelocations
The number of relocations for the section. Is zero for executable images.
Declaration
public ushort NumberOfRelocations { get; set; }
Property Value
Type | Description |
---|---|
System.UInt16 |
PointerToLinenumbers
Pointer to the beginning of the line-numbers in the file. Zero if there are no line-numbers in the file.
Declaration
public uint PointerToLinenumbers { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |
PointerToRawData
Raw address of the section in the file.
Declaration
public uint PointerToRawData { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |
PointerToRelocations
Pointer to the beginning of the relocation. If there are none, the value is zero.
Declaration
public uint PointerToRelocations { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |
SizeOfRawData
Size of the section in raw on disk. Must be a multiple of the file alignment specified in the optional header. If its less than the virtual size, the rest is filled with zeros.
Declaration
public uint SizeOfRawData { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |
VirtualAddress
RVA of the section start in memory.
Declaration
public uint VirtualAddress { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |
VirtualSize
Size of the section when loaded into memory. If it's bigger than the raw data size, the rest of the section is filled with zeros.
Declaration
public uint VirtualSize { get; set; }
Property Value
Type | Description |
---|---|
System.UInt32 |