Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   Remove signature from windows DLL? (https://forum.exetools.com/showthread.php?t=19643)

jonwil 09-06-2020 21:34

Remove signature from windows DLL?
 
I have a 64-bit windows DLL with a digital signature. I want to remove the signature so I can modify the DLL (I know the program that uses the DLL doesn't care about the signature). Is there a tool that can remove the signature without affecting anything else in the DLL?

bolo2002 09-06-2020 22:34

1 Attachment(s)
unsigntool or delcert.exe inside,dunno if it can help.

LaDidi 09-07-2020 03:03

@jonwill :
You may use CFF Explorer and reset table for signature :
* Security Table RVA
* Security Table Size

Archer 09-08-2020 03:27

Quote:

Originally Posted by LaDidi (Post 121113)
@jonwill :
You may use CFF Explorer and reset table for signature :
* Security Table RVA
* Security Table Size

You may also need to clear IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY flag in DLL Characteristics. And probably you'll want to remove overlay where signature is located.

LaDidi 09-08-2020 14:04

@ARCHER :
Never saw this flag.
I will check it

LaDidi 09-09-2020 14:58

@Archer :
Effectively, it exists and it's used by Windows.
Happy to learn something "new"...


All times are GMT +8. The time now is 10:21.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX