How to get the address of .rsrc PE section when loaded in memory using C?

malware
reverseengineering
#1

Hello everyone

How to get the address of .rsrc PE section when loaded in memory and save it to pointer using C language ?

thanks

0 Likes

#2

I am sure there are WINAPI functions to do that but you can also parse PEB to get to the DOS header which will lead to a list of all sections and their adresses.

0 Likes

(system) closed #3

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.

0 Likes