![]() |
#1
|
||||
|
||||
[SRC][C++] Delcert
A signed file is a standard Windows PE executable with signature data appended
to it. A PE file begins with a 16-bit MSDOS executable stub (which just prints a message that you can't run the program and exits). |
The Following 3 Users Gave Reputation+1 to Mahmoudnia For This Useful Post: | ||
The Following User Says Thank You to Mahmoudnia For This Useful Post: | ||
kangalooj (12-28-2015) |
#2
|
|||
|
|||
Not sure how often people need to strip digital signatures from signed PEs (and if they do, it can be achieved with a few clicks in HIEW, for example).
However, when there's a tool for it... it would be nice if it at least corrected the PE checksum after stripping (if set). |
#3
|
|||
|
|||
@gigaman: Since the source is included I think the tool fits a certain education purpose regardless of various features not being present.
|
The Following User Gave Reputation+1 to mr.exodia For This Useful Post: | ||
Mahmoudnia (07-11-2014) |
#4
|
|||
|
|||
|
The Following 4 Users Gave Reputation+1 to alephz For This Useful Post: | ||
chessgod101 (07-07-2014), Mahmoudnia (07-11-2014), MarcElBichon (07-07-2014), mr.exodia (07-08-2014) |
#5
|
|||
|
|||
> CheckSumMappedFile
MapFileAndCheckSum. Only useful for drivers. |
The Following User Gave Reputation+1 to SLV For This Useful Post: | ||
mr.exodia (07-28-2014) |
The Following User Says Thank You to SLV For This Useful Post: | ||
Mahmoudnia (08-30-2017) |
![]() |
Thread Tools | |
Display Modes | |
|
|