![]() |
[SRC][C++] Delcert
1 Attachment(s)
A signed file is a standard Windows PE executable with signature data appended
to it. A PE file begins with a 16-bit MSDOS executable stub (which just prints a message that you can't run the program and exits). |
Not sure how often people need to strip digital signatures from signed PEs (and if they do, it can be achieved with a few clicks in HIEW, for example).
However, when there's a tool for it... it would be nice if it at least corrected the PE checksum after stripping (if set). |
@gigaman: Since the source is included I think the tool fits a certain education purpose regardless of various features not being present.
|
1 Attachment(s)
Quote:
|
> CheckSumMappedFile
MapFileAndCheckSum. Only useful for drivers. |
| All times are GMT +8. The time now is 12:20. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX