逆向工程 - Win7 和 Win8 PE 加载器的区别？ - 吾爱随笔录

是否知道 Window 7 和 Windows 8 PE 加载程序之间的区别是什么？

我正在尝试手工制作一个简单的可执行 PE 映像文件。它在 Windows 7 中运行良好，但被 Windows 8 拒绝。

该文件在此处链接：http : //lars.nocrew.org/tmp/W7-ok.exe

Microsoft (R) COFF/PE Dumper Version 8.00.50727.762

Dump of file W7-ok.exe
PE signature found
File Type: EXECUTABLE IMAGE

FILE HEADER VALUES
             14C machine (x86)
               0 number of sections
               0 time date stamp Thu Jan 01 00:00:00 1970
               0 file pointer to symbol table
               0 number of symbols
              E0 size of optional header
             10F characteristics
                   Relocations stripped
                   Executable
                   Line numbers stripped
                   Symbols stripped
                   32 bit word machine

OPTIONAL HEADER VALUES
             10B magic # (PE32)
            0.00 linker version
               0 size of code
               0 size of initialized data
               0 size of uninitialized data
             24C entry point (0040024C)
               0 base of code
               0 base of data
          400000 image base (00400000 to 0040025B)
               4 section alignment
               4 file alignment
            0.00 operating system version
            0.00 image version
            4.00 subsystem version
               0 Win32 version
             25C size of image
             230 size of headers
               0 checksum
               3 subsystem (Windows CUI)
               0 DLL characteristics
               0 size of stack reserve
               0 size of stack commit
               0 size of heap reserve
               0 size of heap commit
               0 loader flags
               2 number of directories
               0 [       0] RVA [size] of Export Directory
             1B8 [       0] RVA [size] of Import Directory


  Summary