CoffFlags

The Characteristics field contains flags that indicate attributes of the object or image file. The following flags are currently defined:

Values

ValueMeaning
RELOCS_STRIPPED0x0001

Image only, Windows CE, and Microsoft Windows NT® and later. This indicates that the file does not contain base relocations and must therefore be loaded at its preferred base address. If the base address is not available, the loader reports an error. The default behavior of the linker is to strip base relocations from executable (EXE) files.

EXECUTABLE_IMAGE0x0002

Image only. This indicates that the image file is valid and can be run. If this flag is not set, it indicates a linker error.

LINE_NUMS_STRIPPED0x0004
LOCAL_SYMS_STRIPPED0x0008
AGGRESSIVE_WS_TRIM0x0010
LARGE_ADDRESS_AWARE0x0020

Application can handle > 2-GB addresses.

BYTES_REVERSED_LO0x0080
_32BIT_MACHINE0x0100

Machine is based on a 32-bit-word architecture.

DEBUG_STRIPPED0x0200

Debugging information is removed from the image file.

REMOVABLE_RUN_FROM_SWAP0x0400

If the image is on removable media, fully load it and copy it to the swap file.

NET_RUN_FROM_SWAP0x0800

If the image is on network media, fully load it and copy it to the swap file.

SYSTEM0x1000

The image file is a system file, not a user program.

DLL0x2000

The image file is a dynamic-link library (DLL). Such files are considered executable files for almost all purposes, although they cannot be directly run.

UP_SYSTEM_ONLY0x4000

The file should be run only on a uniprocessor machine.

BYTES_REVERSED_HI0x8000

Meta