SigFlip

O que é ? O SigFlip é uma ferramenta para modificar arquivos PE assinados digitalmente exe, dll, sys, etc. de uma forma que não afeta ou quebra a assinatura authenticode existente. Em outras palavras, você pode alterar o checksum/hash do arquivo PE incorporando dados ex: shellcode sem quebrar a...

Bitdefender in processing PE code signing the organizationName field when there is buffer overflow vulnerability-vulnerability warning-the black bar safety net

A vulnerability summary This paper describes the Bitdefender PE engine in the presence of a buffer overflow vulnerability. Bitdefender provides“anti-malware antimalware”of the engine, the engine can be integrated to other security vendors ' products, Bitdefender in their products, such as...

KB2915720: Changes in Windows Authenticode Signature Verification

The remote Windows host has not enabled the Windows Authenticode signature verification certificate padding check. This means extraneous information can be included in signed binaries. Note that Microsoft announced on July 29, 2014, that it no longer plans to enforce the stricter signature...