2.7 Example of Injection of a Software
185
Fig. 2.34 Simplified structure of the spy program Reign
libraries, export and import tables of API functions, data for control of resources,
and data of the thread-local storage (TLS). In Windows NT operating systems, the
format PE is used for EXE, DLL, SYS (device drivers), and other executables [1–8].
PE format is also often used by ReactOS, since ReactOS is designed to be fully
compatible with windows on the code level. Moreover, it was historically used by
many other operating systems as well, including SkyOS and BeOS R3. However, as
we know, both SkyOS and BeOS ultimately switched to the ELF format.
Since the widely used development program Mono aims to be fully compatible
with Microsoft.NET, it uses the same PE format as in Microsoft version.
It should be noted that on the platform X86, in Unix-like operating systems,
certain binary Windows files (in the PE format) can be executed with the help of
Wine. HX DOS Extender also uses the PE format for its own 32-bit binary DOS
185
Fig. 2.34 Simplified structure of the spy program Reign
libraries, export and import tables of API functions, data for control of resources,
and data of the thread-local storage (TLS). In Windows NT operating systems, the
format PE is used for EXE, DLL, SYS (device drivers), and other executables [1–8].
PE format is also often used by ReactOS, since ReactOS is designed to be fully
compatible with windows on the code level. Moreover, it was historically used by
many other operating systems as well, including SkyOS and BeOS R3. However, as
we know, both SkyOS and BeOS ultimately switched to the ELF format.
Since the widely used development program Mono aims to be fully compatible
with Microsoft.NET, it uses the same PE format as in Microsoft version.
It should be noted that on the platform X86, in Unix-like operating systems,
certain binary Windows files (in the PE format) can be executed with the help of
Wine. HX DOS Extender also uses the PE format for its own 32-bit binary DOS