adplus-dvertising
frame-decoration

Question

What does the e_lfanew member in the DOS header point to?

a.

The DataDirectory

b.

The BaseOfCode

c.

The real PE header

d.

The AddressOfEntryPoint

Posted under Reverse Engineering

Answer: (c).The real PE header Explanation:The e_lfanew member in the DOS header points to the real PE header, which is an extension to the DOS header.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. What does the e_lfanew member in the DOS header point to?

Similar Questions

Discover Related MCQs

Q. Where are most of the interesting contents in a PE header stored?

Q. What is the purpose of the DataDirectory in a PE header?

Q. Are pointers within the PE header actual pointers or RVAs?

Q. What are the mechanisms that enable the dynamic linking process of executables?

Q. What is the purpose of the import table in a module?

Q. How are the addresses of the imported functions found during runtime?

Q. What is the purpose of the IAT in a module?

Q. What does the linker do to resolve each entry in the IAT?

Q. What are the Optional Directories in the Portable Executable File Format?

Q. What is the Export Table in the Portable Executable File Format?

Q. What is the Import Table in the Portable Executable File Format?

Q. What is the Resource Table in the Portable Executable File Format?

Q. What is the Import Address Table (IAT) in the Portable Executable File Format?

Q. What is the relevance of I/O in reversing?

Q. What are the two layers of I/O channels in Windows?

Q. What is the I/O system responsible for in Windows?

Q. What are generic requests in the I/O system?

Q. How does the I/O system enable the creation of generic file system drivers and generic storage drivers?

Q. What is the I/O system?

Q. What are filter drivers?