Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-05-2014, 14:12
Mahmoudnia's Avatar
Mahmoudnia Mahmoudnia is offline
Family
 
Join Date: Nov 2012
Location: Iran
Posts: 210
Rept. Given: 63
Rept. Rcvd 138 Times in 46 Posts
Thanks Given: 139
Thanks Rcvd at 184 Times in 85 Posts
Mahmoudnia Reputation: 100-199 Mahmoudnia Reputation: 100-199
[SRC][C++] Delcert

A signed file is a standard Windows PE executable with signature data appended
to it. A PE file begins with a 16-bit MSDOS executable stub (which just prints
a message that you can't run the program and exits).
Attached Files
File Type: rar [SRC]Delcert.rar (15.0 KB, 46 views)
Reply With Quote
The Following 3 Users Gave Reputation+1 to Mahmoudnia For This Useful Post:
chessgod101 (07-07-2014), ontryit (07-19-2014), uel888 (07-27-2014)
The Following User Says Thank You to Mahmoudnia For This Useful Post:
kangalooj (12-28-2015)
  #2  
Old 07-07-2014, 03:56
gigaman gigaman is offline
Friend
 
Join Date: Jun 2002
Posts: 86
Rept. Given: 0
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 14 Times in 11 Posts
gigaman Reputation: 4
Not sure how often people need to strip digital signatures from signed PEs (and if they do, it can be achieved with a few clicks in HIEW, for example).

However, when there's a tool for it... it would be nice if it at least corrected the PE checksum after stripping (if set).
Reply With Quote
  #3  
Old 07-07-2014, 06:28
mr.exodia's Avatar
mr.exodia mr.exodia is offline
Super Moderator
 
Join Date: Nov 2011
Posts: 859
Rept. Given: 499
Rept. Rcvd 1,155 Times in 309 Posts
Thanks Given: 94
Thanks Rcvd at 757 Times in 359 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@gigaman: Since the source is included I think the tool fits a certain education purpose regardless of various features not being present.
__________________
x64dbg: http://x64dbg.com
My Blog: http://mrexodia.cf
Reply With Quote
The Following User Gave Reputation+1 to mr.exodia For This Useful Post:
Mahmoudnia (07-11-2014)
  #4  
Old 07-07-2014, 06:51
alephz alephz is offline
VIP
 
Join Date: May 2002
Location: Israel
Posts: 390
Rept. Given: 127
Rept. Rcvd 291 Times in 93 Posts
Thanks Given: 180
Thanks Rcvd at 69 Times in 23 Posts
alephz Reputation: 200-299 alephz Reputation: 200-299 alephz Reputation: 200-299
Quote:
Originally Posted by gigaman View Post
correct the PE checksum
CheckSumMappedFile
Attached Files
File Type: 7z sfix.7z (3.3 KB, 35 views)
Reply With Quote
The Following 4 Users Gave Reputation+1 to alephz For This Useful Post:
chessgod101 (07-07-2014), Mahmoudnia (07-11-2014), MarcElBichon (07-07-2014), mr.exodia (07-08-2014)
  #5  
Old 07-27-2014, 05:36
SLV SLV is offline
Friend
 
Join Date: May 2005
Posts: 62
Rept. Given: 3
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 5
Thanks Rcvd at 2 Times in 2 Posts
SLV Reputation: 4
> CheckSumMappedFile
MapFileAndCheckSum. Only useful for drivers.
Reply With Quote
The Following User Gave Reputation+1 to SLV For This Useful Post:
mr.exodia (07-28-2014)
The Following User Says Thank You to SLV For This Useful Post:
Mahmoudnia (08-30-2017)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On



All times are GMT +8. The time now is 15:56.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX
( 1998 - 2021 )