How to get the address of .rsrc PE section when loaded in memory using C?

malware
reverseengineering

#1

Hello everyone

How to get the address of .rsrc PE section when loaded in memory and save it to pointer using C language ?

thanks


#2

I am sure there are WINAPI functions to do that but you can also parse PEB to get to the DOS header which will lead to a list of all sections and their adresses.


(system) #3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.