How to Find Digital Certificates in the PE File Format

We continue to explore the PE file format in this video by discussing digital signatures. PE files can be signed to help ensure their integrity - but how can you tell if a file is signed? In this video, we'll look at the necessary properties of the PE file format to identify digital signatures. We'll also use the tool malcat to extract meaningful information from the certificate.
Cybersecurity, reverse engineering, malware analysis and ethical hacking content!
🎓 Courses on Pluralsight 👉🏻 www.pluralsigh...
🌶️ UA-cam 👉🏻 Like, Comment & Subscribe!
🙏🏻 Support my work 👉🏻 / joshstroschein
🌎 Follow me 👉🏻 / jstrosch , / joshstroschein
⚙️ Tinker with me on Github 👉🏻 github.com/jst...
🤝 Join the Discord community and more 👉🏻 www.thecyberye...
0:56 What is a Digital Certificate
1:23 Exploring the DATA_DIRECTORY structure
1:50 IMAGE_DATA_DIRECTORY
2:48 RVAs versus raw file offsets
4:00 Enter Malcat!
5:48 Starting with 010
8:40 Analysis with Malcat

[@whoamisecurity9586]

Please make a complete video how you do analysis for flare with report

[@jstrosch]

That's a great suggestion. I'll add it to my list and try to come up with something soon!

[@johnnywilliams2641]

The man ,the myth, the monster. A yeti ate my dog once.

[@jstrosch]

They can get vicious if hungry or irritable