Results 1 to 3 of 3

Thread: PE "Digital Signature" format?

  1. #1

    PE "Digital Signature" format?

    Hello,

    while I am able to DS an executable, I would like to know a bit more about it in order to automate such process. The docs I have found about it are not what i need, so I guess its better ask...

    What I want to achieve is just the ability to sign an application from my c++ code -with the difference that I have to add the space for DS and place it into the code.
    How does it work, exactly? I mean, how can I apply a digital signature to a prepared exe (i.e. an exe where i carve/add space for DS), given i have the cert?

    Thanks for any insight!

    Maximus
    I want to know God's thoughts ...the rest are details.
    (A. Einstein)
    --------
    ..."a shellcode is a command you do at the linux shell"...

  2. #2
    Registered User
    Join Date
    Feb 2004
    Location
    France
    Posts
    99
    Hi,

    I hope that the concept of "Digital signature" and what is called "The Attribute Certificate Table" in the PE specification (chap. 5.7) are the same things.

    You may already have checked the ImageAddCertificate() API:

    http://msdn.microsoft.com/en-us/library/ms680147%28VS.85%29.aspx

    If you want to do all the stuff by yourself (why not relying on the API?), check out the internal logic of the API on the ReactOS website:

    http://doxygen.reactos.org/d2/d5a/integrity_8c_a6a220d3293584ff01aae0e92a60c6cbe.html#a6a220d3293584ff01aae0e92a60c6cbe

    Sorry if it's not the same thing at all...
    Last edited by Neitsa; August 21st, 2010 at 12:18.
    Omne tulit punctum qui miscuit utile dulci

  3. #3
    hi,

    thanks for reminding me ReactOS

    I have used it sometime when I were digging in kernelland, it is a very valueable source of information, indeed.

    Indeed, those APIs looks to contain exactly what I were looking for - I will move next days for implementing them , thanks
    I want to know God's thoughts ...the rest are details.
    (A. Einstein)
    --------
    ..."a shellcode is a command you do at the linux shell"...

Similar Threads

  1. Replies: 0
    Last Post: February 13th, 2014, 07:42
  2. how to generat "1" instead of "uncounted" license
    By joyung in forum The Newbie Forum
    Replies: 38
    Last Post: April 10th, 2012, 03:57
  3. PE "Version info" resource format?
    By Maximus in forum Advanced Reversing and Programming
    Replies: 1
    Last Post: August 21st, 2010, 12:02
  4. Replies: 1
    Last Post: December 14th, 2007, 13:35
  5. Replies: 1
    Last Post: December 11th, 2002, 06:23

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •