portable executable - ImageBaseAddress of PEB

Question

When I dump the data at the ImageBaseAddress from the PEB output for some programs, I could the see the MS-DOS header. But it is not appearing for some other programs. What is the reason?

For example, when I dump the PEB of SVCHost.exe this is the output

When I try to dump the ImageBaseAddress of the notepad.exe, this is the output.

question from:https://stackoverflow.com/questions/65944900/imagebaseaddress-of-peb

Answer 1

Waitting for answers