Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

PEChecksumTypeWin Executable File Object Schema

The PECheckSumType records the checksum of the PE file, both as found in the file and computed.

Fields

Field Name Type Description
PE_Computed_API0..1 LongObjectPropertyType

PE_Computed_API specifies a checksum computed by an external algorithm.
PE_File_API0..1 LongObjectPropertyType

PE_File_API specified the checksum computed by IMAGHELP.DLL.
PE_File_Raw0..1 LongObjectPropertyType

PE_File_Raw specifies the checksum found in the PE file (in the Optional Header).