Pe32 Executable -console- X86-64 For Ms Windows Apr 2026
Compile (MSVC):
| Component | Meaning | |-----------|---------| | | 64-bit Portable Executable format (extension of original PE32). Uses 64-bit fields for image base, virtual addresses, and sizes. | | console | Subsystem = Console. App runs in a terminal window (cmd/powershell). Not GUI ( /SUBSYSTEM:WINDOWS ). | | x86-64 | Target machine architecture = AMD64 (also called x64, Intel 64). Not ARM, not IA64 (Itanium). | | MS Windows | Target OS: Windows (NT family: 2000, XP, Vista, 7, 10, 11, Server). | 2. PE32+ File Structure PE32+ follows the same logical layout as PE32, but with key structural differences.
When a file analyzer (like file command, Detect It Easy, or PEiD) shows: pe32 executable -console- x86-64 for ms windows
Build:
PE32+ executable (console) x86-64 for MS Windows App runs in a terminal window (cmd/powershell)
main: sub rsp, 40 ; shadow + align mov rcx, -11 ; STD_OUTPUT_HANDLE call GetStdHandle mov rcx, rax lea rdx, [msg] mov r8, 23 ; length lea r9, [rsp + 32] ; lpNumberOfBytesWritten call WriteFile xor rcx, rcx call ExitProcess
cl /O1 /GS- /Gs9999999 minimal_console.c /link /SUBSYSTEM:CONSOLE /MACHINE:X64 /ENTRY:main Check output: Not ARM, not IA64 (Itanium)
It breaks down as:
nasm -f win64 hello.asm -o hello.obj x86_64-w64-mingw32-ld hello.obj -o hello.exe -lkernel32 8.1 Check basic info (using dumpbin ) dumpbin /headers myapp.exe | findstr "machine magic subsystem" Output example:
