The property specifies the Number_Of_Relocations cyboxCommon: Number_Of_Relocations 0..1 number of relocations defined for the specified PE binary NonNegativeIntegerObjectPropertyType section. The property specifies the Number_Of_Linenumbers cyboxCommon: Number_Of_Linenumbers 0..1 number of line number entries for the section. Should be NonNegativeIntegerObjectPropertyType 0. cyboxCommon: The property specifies any flags Chara21cteristics Characteristics 0..1 defined for the specified PE binary section. HexBinaryObjectPropertyType The class is a container for the characteristics of the _IMAGE_DOS_HEADER structure, which can be found in Winnt.h and DOSHeaderType pe.h. See for more information about the winnt.h file, and for even more clarification. The property table of the class is given in Table 318. DOSHeaderType Table . Properties of the class DOSHeaderType Name Type Multiplicity Description The property specifies the magic number, specifically the e_magic cyboxCommon: Windows OS signature value, which can either take on MZ for DOS e_magic 0..1 (which is, for all intents and purposes, most Windows executables), NE HexBinaryObjectPropertyType for OS2, LE for OS2 LE, or PE00 for NT. The property specifies the number of bytes actually used in the e_cblp last page, with the special case of a full page being represented by a cyboxCommon: e_cblp 0..1 value of zero (since the last page is never empty). For example, assuming HexBinaryObjectPropertyType a page size of 512 bytes, this value would be 0x0000 for a 1024 byte file, and 0x0001 for a 1025 byte file (since it only contains one valid byte).
Number_Of_Relocations cyboxCommon: NonNegativeIntegerObjectPropertyType 0..1 The Number_Of_Relocations property specifies the number of relocations defined for the specified PE binary section. Number_Of_Linenumbers cyboxCommon: NonNegativeIntegerObjectPropertyType 0..1 The Number_Of_Linenumbers property specifies the number of line number entries for the section. Should be 0. Characteristics cyboxCommon: HexBinaryObjectPropertyType 0..1 The Chara21cteristics property specifies any flags defined for the specified PE binary section. The DOSHeaderType class is a container for the characteristics of the _IMAGE_DOS_HEADER structure, which can be found in Winnt.h and pe.h. See for more information about the winnt.h file, and for even more clarification. The property table of the DOSHeaderType class is given in Table 318. Table . Properties of the DOSHeaderType class Name Type Multiplicity Description e_magic cyboxCommon: HexBinaryObjectPropertyType 0..1 The e_magic property specifies the magic number, specifically the Windows OS signature value, which can either take on MZ for DOS (which is, for all intents and purposes, most Windows executables), NE for OS2, LE for OS2 LE, or PE00 for NT. e_cblp cyboxCommon: HexBinaryObjectPropertyType 0..1 The e_cblp property specifies the number of bytes actually used in the last page, with the special case of a full page being represented by a value of zero (since the last page is never empty). For example, assuming a page size of 512 bytes, this value would be 0x0000 for a 1024 byte file, and 0x0001 for a 1025 byte file (since it only contains one valid byte).