Explore the intricacies of digital signatures in PE files through this informative 13-minute video tutorial. Delve into the PE file format to understand how to identify digital signatures and ensure file integrity. Learn about the necessary properties within the PE file structure for locating digital signatures. Gain hands-on experience using the malcat tool to extract valuable information from certificates. Follow along as the instructor examines the DATA_DIRECTORY structure, IMAGE_DATA_DIRECTORY, and the differences between RVAs and raw file offsets. Witness practical demonstrations using 010 Editor and malcat for in-depth analysis of digital certificates in PE files. Perfect for cybersecurity enthusiasts, reverse engineers, and malware analysts looking to enhance their understanding of file integrity verification techniques.
Overview
Syllabus
What is a Digital Certificate
Exploring the DATA_DIRECTORY structure
IMAGE_DATA_DIRECTORY
RVAs versus raw file offsets
Enter Malcat!
Starting with 010
Analysis with Malcat
Taught by
Dr Josh Stroschein
Related Courses
-
TLS Callbacks in PE Files - Detection and Analysis
-
PE File Format Basics for Malware Analysis and Reverse Engineering - MM#08
-
The AddressOfEntryPoint and Tips for Finding Main in PE Files
-
Reverse Engineering & Malware Analysis in 21 Hours | REMAC+
-
Digital Forensics
4.8 -
Mastering Reverse Engineering & Malware Analysis | REMASM+
