dissect.executable.pe.directory.load_config

Module Contents

Classes

LoadConfigDirectory

The load configuration directory of a PE file.

class dissect.executable.pe.directory.load_config.LoadConfigDirectory(pe: dissect.executable.pe.pe.PE, address: int, size: int)

Bases: dissect.executable.pe.directory.base.DataDirectory

The load configuration directory of a PE file.

property config: dissect.executable.pe.c_pe.c_pe.IMAGE_LOAD_CONFIG_DIRECTORY32 | dissect.executable.pe.c_pe.c_pe.IMAGE_LOAD_CONFIG_DIRECTORY64

The load configuration directory header.

property timestamp: datetime.datetime | None

The timestamp of the load configuration directory, or None if the PE file is compiled as reproducible.

The security cookie address.

property guard_flags: dissect.executable.pe.c_pe.c_pe.IMAGE_GUARD

The guard flags.

property chpe: dissect.executable.pe.c_pe.c_pe.IMAGE_ARM64EC_METADATA | dissect.executable.pe.c_pe.c_pe.IMAGE_ARM64EC_METADATA_V2 | dissect.executable.pe.c_pe.c_pe.IMAGE_CHPE_METADATA_X86 | None

The CHPE (Compiled Hybrid Portable Executable) metadata.