Reverse Engineering and Malware Analysis
Reverse Engineering and Malware Analysis
Sign in to save your progress, earn points, and unlock module exams.
Topic 2.3 of Fundamentals of Malware Analysis
The internal structure of Windows executables — DOS header, PE signature, File Header, Optional Header, Data Directories, section table, RVAs, and the anomalies that indicate packed or malicious binaries.
By the end of this topic, you will
Quadrant 1 · e-Tutorial
EZ Bytes · quick recaps
PE File Format: Master the Malware Blueprint
61s
Video lesson
Quadrant 2 · e-Content
Quadrant 3 · Web Resources
Downloadable reference material
External links
PE-Bear — Visual PE Structure Explorer
Free PE editor and viewer with graphical display of all header fields, sections, and data directories. Install in your analysis VM.
Corkami PE101 — Visual PE Reference
Visual reference mapping every PE field to its hex offset. Print and keep beside your disassembler.
Quadrant 4 · Self-Assessment
Fundamentals of Malware Analysis
Covers the analysis environment, PE file structure, static property examination, behavioural analysis, and dynamic code analysis of Windows executables.
REMA: Complete Assessment
A comprehensive 120-question assessment covering the entire Reverse Engineering and Malware Analysis curriculum: malware taxonomy and reverse engineering fundamentals, static and dynamic analysis, reversing malicious code, malicious web and document files, in-depth analysis of packed and fileless malware, and self-defending malware techniques.
Quadrant 5 · Play
Ungraded practice for The Portable Executable (PE) File Format: games and hands-on Skill Labs that use this topic, plus the crossword for Fundamentals of Malware Analysis. It never affects your unit assessment, and clearing a game or lab for the first time earns EZ Board points when you are signed in.
Lab
PE Autopsy: Triage a Real Signed Windows Binary
15 tasks from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Lab
Packed and Unpacked: Defeat a Packer
13 tasks from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Crossword
Fundamentals of Malware Analysis
11 key terms from this unit. Free to play.
Sequence
Anatomy of a PE File
6 steps from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Memory
Inside a PE File Memory
6 pairs from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Race
PE Pass
6 checkpoints from this unit. Free to play. Earn 30 EZ Board points on your first clear.
Discussion · 0 comments
This is the discussion thread for the lesson "The Portable Executable (PE) File Format" (Reverse Engineering and Malware Analysis, Unit 2). Ask questions, share real-world examples, and help classmates who are stuck. Conversation starters. Try explaining one of these in your own words: - List eight Windows file types that use the PE format - Describe the four-part book analogy for the PE structure - Explain the critical difference between on-disk and in-memory PE layout
No comments yet. Start the conversation. Comments here also appear in the forum.
Open in forumMicrosoft PE Format Specification
Official Microsoft documentation for the PE/COFF file format. Authoritative reference for all header structure definitions.