> > > Linux uses ELF, not PE/COFF. > You are correct, I mistaken COFF from Unix with ELF. In ELF there is simply e_ident[EI_CLASS] at offset 4 and e_machine at offset $12. Source: http://en.wikipedia.org/wiki/Executable_and_Linkable_Format