Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

DLL's - Signed or unsigned??

  • 13-02-2007 4:47pm
    #1
    gracehopper
    Registered Users, Registered Users 2 Posts: 1,144 ✭✭✭


    I have a cab file with about 40 odd dll's in it. does anyone know if there is a quick way to tell if they're signed or unsigned??

    thanks,
    Gracehopper


Comments

  • #2
    gracehopper
    Registered Users, Registered Users 2 Posts: 1,144 ✭✭✭gracehopper


    anyone?


  • #3
    Martyr
    Closed Accounts Posts: 1,567 ✭✭✭Martyr


    hey gracehopper, just saw this post now..hope i'm not too late to reply.

    you might want to look at ChkTrust.exe or signtool.exe for windows operating systems..not sure if they checks inside cab files, but..possibly the cab file is signed itself, check the .net framework SDK (link wouldn't work, check msdn.microsoft.com

    i would like a program like this too for system forensics, looking for suspicious files on a system for example...any file that has Microsoft in its version strings, but isn't signed would be suspicious.
    Process Explorer and Autoruns by sysinternals have this option, but i don't know of any programs that do it like.. say from the command line C:\IsSigned <DLL FILE HERE>

    i'm sure you could do it with microsoft crypto api, if you can program a little?


    this thread     may help you with any code you write
    another discussion about it here

    sorry if i cant help any more than that at the moment.


Advertisement