News for hackers. Stuff that matters.

A comment on Reverse Engineering Malware 101. Parent comment

Re:Reverse Engineering Malware 101 by SCHiM on Wednesday March 29, 2017 @05:57PM (#13990987)
The only fields in the PE header dealing directly with the stack are:

   SizeOfStackReserve:           0x00100000
   SizeOfStackCommit:            0x00001000
Certainly nothing there that indicates which way the stack should grow. PE does not deal with the stack directly.
[ Parent | on HN ]

There are no comments on this comment yet.