![]() |
|
#35
|
|||
|
|||
|
Steps:
1. Determine whether the file is 32-bit or 64-bit based on the magic number. (010B or 020B) 2. Locate the Security Directory in the PE HEADER using its RVA and size, and remove the corresponding signature content from the file. ( The signature content is at the end of the file. ) 3. Clear the RVA and size fields of the Security Directory. 4. Recalculate the checksum and update it. You could handle the sys file with tools, e.g. winhex +lordpe. I have made the python file to do this. Attachment is the python file and the sys file (already remove the sign) Last edited by wx69wx2023; 11-24-2024 at 13:08. |
| The Following User Gave Reputation+1 to wx69wx2023 For This Useful Post: | ||
niculaita (11-24-2024) | ||
|
|
Similar Threads
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| VMProtect Source Code Potentially Leaked | atom0s | General Discussion | 12 | 11-23-2022 04:21 |
| Leaked Alder Lake BIOS Source Code | DavidXanatos | General Discussion | 5 | 11-02-2022 19:35 |
| Microsoft 37GB source code leaked? | WhoCares | General Discussion | 14 | 05-30-2022 18:56 |