EXE

From Just Solve the File Format Problem
(Difference between revisions)
Jump to: navigation, search
(Resources)
(Added sample files)
 
(13 intermediate revisions by 3 users not shown)
Line 4: Line 4:
 
|extensions={{ext|exe}}
 
|extensions={{ext|exe}}
 
}}
 
}}
 +
'''EXE''' is a family of executable file formats. It includes the original [[MS-DOS EXE]] format, and a number of newer formats built on top of that format. Most of them use the same '''.exe''' file extension.
  
==Overview==
+
Although all members of the EXE family have a file signature of "MZ", it seems that the term "MZ format" is generally used to mean only [[MS-DOS EXE]] (i.e. files designed for MS-DOS).
The EXE [[Executables|executable]] format has its root in [[MS-DOS]] and is still widely used today. The first versions were pure 16 bit DOS executables, identified by either "MZ" or "ZM" as the first two bytes. Later on, lots of additional formats were added, like [[Windows]]' NE (New Executable) extension, [[OS/2]]'s LE and LX (Linear Executable), and later Win32's [[PE executable]] (a variant of [[COFF]]), as well as some DOS extenders adding overlays, resources and other information into it.
+
  
==Resources==
+
EXE files designed for operating systems other than MS-DOS usually contain a short program (called a DOS stub) which, when executed by DOS, prints a message like "This program cannot be run in DOS mode" or "This program requires Microsoft Windows", and immediately exits. Some programs contain a more functional DOS stub, e.g. the Windows 9x registry editor.
 +
 
 +
== Formats ==
 +
This is an incomplete outline of the EXE family of formats.
 +
*  '''EXE'''
 +
** [[MS-DOS EXE]]
 +
** [[NE]] (New Executable, 16-bit)
 +
** [[Linear Executable]]
 +
*** '''LE''' (mixed 16/32-bit)
 +
*** '''LX''' (32-bit)
 +
** [[PE]] (Portable Executable)
 +
*** '''PE32''' (32-bit Windows)
 +
*** '''PE32+''' (64-bit Windows)
 +
 
 +
== Identification ==
 +
All EXE formats start with ASCII signature "{{magic|MZ}}" or, rarely, "{{magic|ZM}}".
 +
 
 +
The byte at offset 3 ''should'' be <code>0x00</code> or <code>0x01</code>, as it is the high byte of a field whose valid values are 0 through 511. However, EXE files for which this is not the case do exist, and may be tolerated by the OS.
 +
 
 +
The starting point for identifying extended formats is the field at offset 60, which if present, points to an extended header.
 +
 
 +
== Sample files ==
 +
* {{DexvertSamples|executable/exe}}
 +
 
 +
== Links ==
 
* [http://www.ctyme.com/intr/rb-2939.htm Ralf Brown's Interrupt List], INT 21h, Function 4Bh, describes lots of the "older" style EXE formats
 
* [http://www.ctyme.com/intr/rb-2939.htm Ralf Brown's Interrupt List], INT 21h, Function 4Bh, describes lots of the "older" style EXE formats
* [http://msdn.microsoft.com/en-us/windows/hardware/gg463119.aspx Microsoft] has a document on the PE specification
+
* [http://www.mitec.cz/exe.html EXE Explorer utility]
* [http://www.csn.ul.ie/~caolan/publink/winresdump/winresdump/doc/pefile.html article] on the PE format as used by Windows NT 3 by Johannes Plachy
+
 
* Linear Executable (LX) file format [http://pastebin.com/tiu12jqs here] (mirror [http://pastebin.ca/2249107 here] and [http://paste2.org/p/2438008 here])
+
See also the articles for the specific EXE formats.
* [http://www.textfiles.com/programming/FORMATS/exefs.pro DOS EXE format]
+
 
 +
[[Category:Microsoft]]

Latest revision as of 15:17, 28 December 2023

File Format
Name EXE
Ontology
Extension(s) .exe

EXE is a family of executable file formats. It includes the original MS-DOS EXE format, and a number of newer formats built on top of that format. Most of them use the same .exe file extension.

Although all members of the EXE family have a file signature of "MZ", it seems that the term "MZ format" is generally used to mean only MS-DOS EXE (i.e. files designed for MS-DOS).

EXE files designed for operating systems other than MS-DOS usually contain a short program (called a DOS stub) which, when executed by DOS, prints a message like "This program cannot be run in DOS mode" or "This program requires Microsoft Windows", and immediately exits. Some programs contain a more functional DOS stub, e.g. the Windows 9x registry editor.

Contents

[edit] Formats

This is an incomplete outline of the EXE family of formats.

  • EXE
    • MS-DOS EXE
    • NE (New Executable, 16-bit)
    • Linear Executable
      • LE (mixed 16/32-bit)
      • LX (32-bit)
    • PE (Portable Executable)
      • PE32 (32-bit Windows)
      • PE32+ (64-bit Windows)

[edit] Identification

All EXE formats start with ASCII signature "MZ" or, rarely, "ZM".

The byte at offset 3 should be 0x00 or 0x01, as it is the high byte of a field whose valid values are 0 through 511. However, EXE files for which this is not the case do exist, and may be tolerated by the OS.

The starting point for identifying extended formats is the field at offset 60, which if present, points to an extended header.

[edit] Sample files

[edit] Links

See also the articles for the specific EXE formats.

Personal tools
Namespaces

Variants
Actions
Navigation
Toolbox