Class The class specifies the headers found in PE and COFF files. The UML diagram corresponding to the class is PEHeadersType PEHeadersType shown in Figure 36. Figure . UML diagram for the class PEHeaderType The property of the class is given in Table 319. PEHeadersType Table . Properties of the class PEHeadersType Name Type Multiplicity Description The property refers to the MS-DOS PE header and DOS_Header DOS_Header DOSHeaderType 0..1 its associated characteristics. cyboxCommon: The property specifies the 4-bytes signature that Signature Signature 0..1 identifies the file as a PE file. HexBinaryObjectPropertyType The property refers to the PE file header File_Header File_Header 0..1 PEFileHeaderType (sometimes referred to as the COFF header) and its associated characteristics. The property refers to the PE optional header Optional_Header Optional_Header 0..1 PEOptionalHeaderType and its associated characteristics. The Optional Header is required for executable (PE) but optional for object (COFF) files. The property specifies the calculated entropy of the PE Entropy Entropy EntropyType 0..1 file header.
Class The PEHeadersType class specifies the headers found in PE and COFF files. The UML diagram corresponding to the PEHeadersType class is shown in Figure 36. Figure . UML diagram for the PEHeaderType class The property of the PEHeadersType class is given in Table 319. Table . Properties of the PEHeadersType class Name Type Multiplicity Description DOS_Header DOSHeaderType 0..1 The DOS_Header property refers to the MS-DOS PE header and its associated characteristics. Signature cyboxCommon: HexBinaryObjectPropertyType 0..1 The Signature property specifies the 4-bytes signature that identifies the file as a PE file. File_Header PEFileHeaderType 0..1 The File_Header property refers to the PE file header (sometimes referred to as the COFF header) and its associated characteristics. Optional_Header PEOptionalHeaderType 0..1 The Optional_Header property refers to the PE optional header and its associated characteristics. The Optional Header is required for executable (PE) but optional for object (COFF) files. Entropy EntropyType 0..1 The Entropy property specifies the calculated entropy of the PE file header.