Authenticode signature format error

ID PE048 Level ERROR Category Format

Description

Authenticode signature of the executable files has format errors.

Mitigation

  • Make sure you do not change the executable image file after it has been signed.
  • The file may be compressed or encrypted.

Arguments

This rule has the following output arguments:

  • signature_info - Readable affected signature name (e.g. "root signature", "timestamp root signature", "nested signature (index 1)")
  • description - Readable format error description
  • exception - Additional error information