LC

Parse a Windows PE Executable Header

medium8/10

Extract Function Names from DWARF Debug Info Implement a Binary Strip Tool

Language

Compiler

2.0s Limit 256MB

Implementation

Implement a PE header parser in C.

Requirements:

Define structures for DOS header, COFF header, and optional header
Verify DOS magic ('MZ') and PE signature ('PE')
Print machine type, number of sections, timestamp
Print entry point, image base, subsystem
Print section names, virtual addresses, sizes, and characteristics
Show whether it is a PE32 or PE32+ binary
Handle basic error cases

Test:

Show DOS magic
Show PE signature
Show machine type
Show sections
Show subsystem

Why This Matters

Every Windows malware analysis workflow starts here: tools like PE-bear, CFF Explorer, and PEview parse the exact DOS/COFF/Optional Header chain you are decoding to spot packed or trojanized binaries before ever opening a disassembler. The MZ/PE magic check is also the first gate Windows' loader (ntdll) runs before mapping any executable into memory.

Hints

0 / 3 revealed

Validation Suite

main.c

Workspace 1.0