Frank Poz

Results 5 comments of Frank Poz

meta_pe: fix rich header length check for hash calculation

The other part of my modification only matters when the Rich header has been tampered with or replaced. The search for the PE header is the first attempt to find...

meta_pe: fix rich header length check for hash calculation

I half agree with Wes. I'll change my PR to search from 0x80 to ```pe.NT_HEADERS.get_file_offset()```, which is what pefile should be doing instead of searching through to the OPTIONAL_HEADER. If...

meta_pe: fix rich header length check for hash calculation

Latest release of pefile makes this much easier. Updated the code to use the clear data exposed by pefile.

meta_pe: fix rich header length check for hash calculation

should also fix #55

digital signature explosion in meta_pe

I suggest checking and using the value from: ``` python pe.OPTIONAL_HEADER.DATA_DIRECTORY[pefile.DIRECTORY_ENTRY['IMAGE_DIRECTORY_ENTRY_SECURITY']].Size ``` In theory, nothing should come after the digital signature, but in practice it sometimes occurs.