SigCheck hash formats - PE256

Justin Johnson 0 Reputation points
2024-04-11T19:25:36.5533333+00:00

SysInternals' SigCheck outputs a number of hash formats: MD5, SHA1, SHA256, PESHA1, PE256

Am I to assume that the PESHA1 and PE256 formats are the image digests as calculated by following the Authenticode specification for "Calculating the PE image hash" from this document: https://download.microsoft.com/download/9/c/5/9c5b2167-8017-4bae-9fde-d599bac8184a/authenticode_pe.docx

Sysinternals
Sysinternals
Advanced system utilities to manage, troubleshoot, and diagnose Windows and Linux systems and applications.
1,163 questions
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.