3.2. Signature (Image Only)

After the MS-DOS stub, at the file offset specified at offset 0x3c, there is a 4-byte signature identifying the file as a PE format image file; this format is used in Win32, Posix on Windows NT, and for some device drivers in Windows NT. Currently, this signature is “PE\0\0” (the letters “P” and “E” followed by two null bytes).