I am currently working on a technical book and exploring the characteristics of sections within a Windows Portable Executable (PE) file. Specifically, I have been experimenting with a Python script to modify the characteristics of sections like the .text section in a sample executable.
As expected, revoking the 'execute' characteristic of the .text section led to a segmentation fault when trying to run the program. However, I encountered an unexpected result when I revoked the 'read' characteristic: the program still executed without any issues.
Is this known behavior in Windows 11, or could it be a bug?
I tried rebooting the VM after changing section permissions to verify.
Any insights or advice would be much appreciated!! Modified Section Permissions still executing ObjDump
