When you start to perform basic static analysis on a file, your first valuable piece of information will be the PE header. The PE header is basically a structure that any executable Windows file follows.
It keeps various information, such as supported systems, memory layout for sections containing code and data (such as strings, pictures, and so on), and various metadata, helping the system load and execute a file properly.
In this section, we will explore the PE header structure and learn how we can analyze a PE file and read its information.
