Exetools

Exetools (https://forum.exetools.com/index.php)
-   Source Code (https://forum.exetools.com/forumdisplay.php?f=46)
-   -   [SRC][C++] Delcert (https://forum.exetools.com/showthread.php?t=15951)

Mahmoudnia 07-05-2014 14:12

[SRC][C++] Delcert
 
1 Attachment(s)
A signed file is a standard Windows PE executable with signature data appended
to it. A PE file begins with a 16-bit MSDOS executable stub (which just prints
a message that you can't run the program and exits).

gigaman 07-07-2014 03:56

Not sure how often people need to strip digital signatures from signed PEs (and if they do, it can be achieved with a few clicks in HIEW, for example).

However, when there's a tool for it... it would be nice if it at least corrected the PE checksum after stripping (if set).

mr.exodia 07-07-2014 06:28

@gigaman: Since the source is included I think the tool fits a certain education purpose regardless of various features not being present.

alephz 07-07-2014 06:51

1 Attachment(s)
Quote:

Originally Posted by gigaman (Post 92651)
correct the PE checksum

CheckSumMappedFile

SLV 07-27-2014 05:36

> CheckSumMappedFile
MapFileAndCheckSum. Only useful for drivers.


All times are GMT +8. The time now is 12:20.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX