Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

PEImportedFunctionTypeWin Executable File Object Schema

The PEImportedFunctionType specifies the type describing imported functions.


Fields

Field Name Type Description
Function_Name0..1 StringObjectPropertyType

The Function_Name field specifies the name of the function from the specified library that the PE binary imports.

Hint0..1 HexBinaryObjectPropertyType

The Hint field specifies the index into the export table of the library that the function is found in.

Ordinal0..1 NonNegativeIntegerObjectPropertyType

The Ordinal field specifies the ordinal value (index) of the function in the library that is found in.

Bound0..1 HexBinaryObjectPropertyType

The Bound field specifies the precomputed address if the imported function is bound.

Virtual_Address0..1 HexBinaryObjectPropertyType

The Virtual_Address field specifies the relative virtual address (RVA) of the PE binary library imported function.