The Section Table and Common Sections
Right after the Optional Header sits an array of
NumberOfSections section headers.
Each header carries Characteristics flags:
MEM_EXECUTE, MEM_READ, MEM_WRITE,
CNT_CODE, CNT_INITIALIZED_DATA.
Key Takeaway
Section names are conventions, not rules — malware renames and repurposes them freely.