Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with exe
Search options not deleted
user 4192
Use this tag when referring to a true .EXE file as opposed to a .COM or .MSI or any other executable.
1
vote
(ILSpy) System.BadImageFormatException: Format of the executable (.exe) or library (.dll) is...
If the program runs, it should be possible to dump the module from memory, after it was reconstructed to original state while loading it to memory.
- 143
2
votes
Certain bytes in the memory (RAM) get changed after the program starts. Why?
The magic might be TLS callbacks that run before entry point is reached. This behavior is well documented, see for example the following article:
https://isc.sans.edu/diary/How+Malware+Defends+Itself …
- 143