Digital Certificate is in the overlay of file or digital certificate is outside of a file
Asked
Active
Viewed 477 times
1 Answers
2
Yes, technically, the certificate of an Executable is located in the overlay of the executable, which is, never mapped into memory.
Most of the time, Analysis tools separate/distinguish between the Certificate and the "rest" of the overlay (if available).
e.g. "pestudio" separates these logical entities...
mox
- 6,084
- 2
- 23
- 35