|
|
#1
07-05-2014, 14:12
|
||||
|
||||
|
[SRC][C++] Delcert
A signed file is a standard Windows PE executable with signature data appended
to it. A PE file begins with a 16-bit MSDOS executable stub (which just prints a message that you can't run the program and exits). 
|
| The Following 3 Users Gave Reputation+1 to Mahmoudnia For This Useful Post: | ||
| The Following User Says Thank You to Mahmoudnia For This Useful Post: | ||
kangalooj (12-28-2015) | ||
|
#2
07-07-2014, 03:56
|
|||
|
|||
|
Not sure how often people need to strip digital signatures from signed PEs (and if they do, it can be achieved with a few clicks in HIEW, for example).
However, when there's a tool for it... it would be nice if it at least corrected the PE checksum after stripping (if set).
|
|
#3
07-07-2014, 06:28
|
|||
|
|||
|
@gigaman: Since the source is included I think the tool fits a certain education purpose regardless of various features not being present.
|
| The Following User Gave Reputation+1 to mr.exodia For This Useful Post: | ||
Mahmoudnia (07-11-2014) | ||
|
#4
07-07-2014, 06:51
|
|||
|
|||
|
Quote:
|
| The Following 4 Users Gave Reputation+1 to alephz For This Useful Post: | ||
chessgod101 (07-07-2014), Mahmoudnia (07-11-2014), MarcElBichon (07-07-2014), mr.exodia (07-08-2014) | ||
|
#5
07-27-2014, 05:36
|
|||
|
|||
|
> CheckSumMappedFile
MapFileAndCheckSum. Only useful for drivers.
|
| The Following User Gave Reputation+1 to SLV For This Useful Post: | ||
mr.exodia (07-28-2014) | ||
| The Following User Says Thank You to SLV For This Useful Post: | ||
Mahmoudnia (08-30-2017) | ||
 |
| Thread Tools | |
| Display Modes | |
|
|
Linear Mode
