diff --git a/volatility3/framework/symbols/linux/utilities/module_extract.py b/volatility3/framework/symbols/linux/utilities/module_extract.py index c70e727da..1176f4b04 100644 --- a/volatility3/framework/symbols/linux/utilities/module_extract.py +++ b/volatility3/framework/symbols/linux/utilities/module_extract.py @@ -463,7 +463,7 @@ class ModuleExtract(interfaces.configuration.VersionableInterface): ) e_machine_int = 0x3E # EM_X86_64 e_ehsize_int = 64 - e_shentsize_int = 52 + e_shentsize_int = 64 header_size = 64 e_type = struct.pack("