PEKS

Gives you the checksum of file, and the one got from the PE header structure
Download

PEKS Ranking & Summary

Advertisement

  • Rating:
  • License:
  • Freeware
  • Publisher Name:
  • Marcello Gorlani
  • Operating Systems:
  • Windows All
  • File Size:
  • 19 KB

PEKS Tags


PEKS Description

Some people really love debugging applications. Unfortunately sometimes you have to debug binary code, since you cannot find your original source code (remember: reverse engineering other people's code is not very polite). Well, you get the work done with your tools but there's a problem: you have just patched the binary file, but now it needs a new checksum. For ordinary PE files, this is not required, but NT family operating systems need that every kernel mode executable (like drivers) have its checksum verified, or they will stop with a blue dump. The PEKS application was designed to be a small command line tool that will give you the checksum of file, and the one got from the PE header structure. If you need to change it, just start peks filename new_checksum and it will set the new checksum into the PE structure. Remember to use the exadecimal format for the new checksum. Remember you have to check it another time to view the change! Examples: peks c:winnt otepad.exe (shows current notepad.exe status) peks c:winntsystem32driversafd.sys 12abc34 (sets the checksum to 0x12abc34) for %f in (*.bin) do peks %f 0 (sets to 0 the checksum of *.bin files in current dir) Attention! DO NOT change the checksum of a device driver if you don't know exactly what you're doing. This may render your system unbootable!


PEKS Related Software