Exetools  

Go Back   Exetools > General > Source Code

Notices

Reply
 
Thread Tools Display Modes
  #1  
Old 07-05-2014, 14:12
Mahmoudnia's Avatar
Mahmoudnia Mahmoudnia is offline
Family
 
Join Date: Nov 2012
Posts: 228
Rept. Given: 64
Rept. Rcvd 142 Times in 49 Posts
Thanks Given: 198
Thanks Rcvd at 282 Times in 97 Posts
Mahmoudnia Reputation: 100-199 Mahmoudnia Reputation: 100-199
[SRC][C++] Delcert

A signed file is a standard Windows PE executable with signature data appended
to it. A PE file begins with a 16-bit MSDOS executable stub (which just prints
a message that you can't run the program and exits).
Attached Files
File Type: rar [SRC]Delcert.rar (15.0 KB, 51 views)
Reply With Quote
The Following 3 Users Gave Reputation+1 to Mahmoudnia For This Useful Post:
chessgod101 (07-07-2014), ontryit (07-19-2014), uel888 (07-27-2014)
The Following User Says Thank You to Mahmoudnia For This Useful Post:
kangalooj (12-28-2015)
  #2  
Old 07-07-2014, 03:56
gigaman gigaman is offline
Friend
 
Join Date: Jun 2002
Posts: 87
Rept. Given: 0
Rept. Rcvd 3 Times in 2 Posts
Thanks Given: 0
Thanks Rcvd at 14 Times in 11 Posts
gigaman Reputation: 4
Not sure how often people need to strip digital signatures from signed PEs (and if they do, it can be achieved with a few clicks in HIEW, for example).

However, when there's a tool for it... it would be nice if it at least corrected the PE checksum after stripping (if set).
Reply With Quote
  #3  
Old 07-07-2014, 06:28
mr.exodia mr.exodia is offline
Retired Moderator
 
Join Date: Nov 2011
Posts: 784
Rept. Given: 492
Rept. Rcvd 1,122 Times in 305 Posts
Thanks Given: 90
Thanks Rcvd at 711 Times in 333 Posts
mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299 mr.exodia Reputation: 1100-1299
@gigaman: Since the source is included I think the tool fits a certain education purpose regardless of various features not being present.
Reply With Quote
The Following User Gave Reputation+1 to mr.exodia For This Useful Post:
Mahmoudnia (07-11-2014)
  #4  
Old 07-07-2014, 06:51
alephz alephz is offline
VIP
 
Join Date: May 2002
Location: Israel
Posts: 390
Rept. Given: 126
Rept. Rcvd 291 Times in 93 Posts
Thanks Given: 180
Thanks Rcvd at 69 Times in 23 Posts
alephz Reputation: 200-299 alephz Reputation: 200-299 alephz Reputation: 200-299
Quote:
Originally Posted by gigaman View Post
correct the PE checksum
CheckSumMappedFile
Attached Files
File Type: 7z sfix.7z (3.3 KB, 39 views)
Reply With Quote
The Following 4 Users Gave Reputation+1 to alephz For This Useful Post:
chessgod101 (07-07-2014), Mahmoudnia (07-11-2014), MarcElBichon (07-07-2014), mr.exodia (07-08-2014)
  #5  
Old 07-27-2014, 05:36
SLV SLV is offline
Friend
 
Join Date: May 2005
Posts: 62
Rept. Given: 3
Rept. Rcvd 4 Times in 3 Posts
Thanks Given: 5
Thanks Rcvd at 2 Times in 2 Posts
SLV Reputation: 4
> CheckSumMappedFile
MapFileAndCheckSum. Only useful for drivers.
Reply With Quote
The Following User Gave Reputation+1 to SLV For This Useful Post:
mr.exodia (07-28-2014)
The Following User Says Thank You to SLV For This Useful Post:
Mahmoudnia (08-30-2017)
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On



All times are GMT +8. The time now is 17:06.


Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX, chessgod101
( 1998 - 2024 )