adplus-dvertising
frame-decoration

Question

Are pointers within the PE header actual pointers or RVAs?

a.

Actual pointers

b.

RVAs

c.

Both a and b

d.

None of the above

Posted under Reverse Engineering

Answer: (b).RVAs Explanation:Pointers within the PE header, such as AddressOfEntryPoint or BaseOfCode, are RVAs (Relative Virtual Addresses) and not actual pointers.

Engage with the Community - Add Your Comment

Confused About the Answer? Ask for Details Here.

Know the Explanation? Add it Here.

Q. Are pointers within the PE header actual pointers or RVAs?

Similar Questions

Discover Related MCQs

Q. What are the mechanisms that enable the dynamic linking process of executables?

Q. What is the purpose of the import table in a module?

Q. How are the addresses of the imported functions found during runtime?

Q. What is the purpose of the IAT in a module?

Q. What does the linker do to resolve each entry in the IAT?

Q. What are the Optional Directories in the Portable Executable File Format?

Q. What is the Export Table in the Portable Executable File Format?

Q. What is the Import Table in the Portable Executable File Format?

Q. What is the Resource Table in the Portable Executable File Format?

Q. What is the Import Address Table (IAT) in the Portable Executable File Format?

Q. What is the relevance of I/O in reversing?

Q. What are the two layers of I/O channels in Windows?

Q. What is the I/O system responsible for in Windows?

Q. What are generic requests in the I/O system?

Q. How does the I/O system enable the creation of generic file system drivers and generic storage drivers?

Q. What is the I/O system?

Q. What are filter drivers?

Q. What is the purpose of monitoring the I/O system for reversers?

Q. What kind of I/O element can a monitored device represent?

Q. What determines the type of data received by a filtering component?