方法
exe 或者dll 以二进制打开查看,PE L 为32位,PE d 为64位
The claim is that 32 bit PE files have the letter ‘L’ right after the PE signature, which is ‘PE\0\0’ or in hex 50 45 00 00. 64 bit PE files on the other hand have allegedly the letter ‘d’ appended to the PE signature.
声称是32位PE文件在PE签名后立即具有字母“ L”,即’PE \ 0 \ 0’或在HEX 50 45 00 00中。64位PE文件据称是字母’ D’附加到PE签名。