The property specifies the checksum in the PE file cyboxCommon: PE_File_Raw PE_File_Raw 0..1 (in the Optional Header). LongObjectPropertyType PEExportsType Class The class specifies the PE File exports data section. The exports data section contains information about symbols exported by PEExportsType the PE File (a DLL) which can be dynamically loaded by other executables. This class and its components abstract the Windows structures. The UML diagram corresponding to the class is shown in Figure 32. PEExportsType Figure . UML diagram for class PEExportsType The property table of the class is given in Table 33. PEExportsType Table . Properties of the class PEExportsType Name Type Multiplicity Description The property specifies the actual name of the PE module, Name cyboxCommon: Name 0..1 as used by the PE loader when it is imported by another StringObjectPropertyType executable. The property specifies a list of the Exported_Functions Exported_Functions PEExportedFunctionsType 0..1 exported functions in this section. cyboxCommon: The property specifies the date and Exports_Time_Stamp Exports_Time_Stamp 0..1 time the export data was created. DateTimeObjectPropertyType The property specifies the number of cyboxCommon: Number_Of_Addresses Number_Of_Addresses 0..1 addresses in the export data section's address table. LongObjectPropertyType
PE_File_Raw cyboxCommon: LongObjectPropertyType 0..1 The PE_File_Raw property specifies the checksum in the PE file (in the Optional Header). PEExportsType Class The PEExportsType class specifies the PE File exports data section. The exports data section contains information about symbols exported by the PE File (a DLL) which can be dynamically loaded by other executables. This class and its components abstract the Windows structures. The UML diagram corresponding to the PEExportsType class is shown in Figure 32. Figure . UML diagram for PEExportsType class The property table of the PEExportsType class is given in Table 33. Table . Properties of the PEExportsType class Name Type Multiplicity Description Name cyboxCommon: StringObjectPropertyType 0..1 The Name property specifies the actual name of the PE module, as used by the PE loader when it is imported by another executable. Exported_Functions PEExportedFunctionsType 0..1 The Exported_Functions property specifies a list of the exported functions in this section. Exports_Time_Stamp cyboxCommon: DateTimeObjectPropertyType 0..1 The Exports_Time_Stamp property specifies the date and time the export data was created. Number_Of_Addresses cyboxCommon: LongObjectPropertyType 0..1 The Number_Of_Addresses property specifies the number of addresses in the export data section's address table.
cybox-v2.1.1-csprd01-part69-win-executable-file.docx