Non-DLL executable exports symbols

ID PE005 Level INFO Category Configuration

Description

The executable file is not marked as a dynamic loaded library, but it has exported symbols. This is an allowed, but a non-standard solution.

The purpose of this solution is generally to provide access to symbols or addresses within the address space of this executable to other libraries loaded into its address space.

This may ease reverse engineering of an executable.

Mitigation

  • Instead of exporting symbols from the non-DLL executable, pass them to a function which is exported by the library loaded into the address space of that executable.

Arguments

This rule has no output arguments.