Struct malwaredb_types::exec::Section

pub struct Section<'a> {
    pub name: String,
    pub is_executable: bool,
    pub size: usize,
    pub offset: usize,
    pub virtual_address: u32,
    pub virtual_size: u32,
    pub entropy: f32,
    pub data: Option<&'a [u8]>,
}

Fields

name: String

Name of the section, can be empty, not a reliable way to identify attributes of it

is_executable: bool

Whether or not an execute bit was set

size: usize

Size of the section

offset: usize

Offset in the file where the section starts

virtual_address: u32

Address of the section once loaded into memory, not for all executable types

virtual_size: u32

Size of the section once loaded into memory, not for all executable types

entropy: f32

Entropy of the section

data: Option<&'a [u8]>

Slice of this section’s bytes

Trait Implementations

impl<'a> Clone for Section<'a>

fn clone(&self) -> Section<'a>

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for Section<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Display for Section<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> PartialEq for Section<'a>

fn eq(&self, other: &Section<'a>) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<'a> StructuralPartialEq for Section<'a>