Authenticode image page hashes check error

ID PE169 Level CRITICAL Category Format

Description

The software was not able to check the Authenticode image page hashes correctness. The error description will provide more details.

Mitigation

  • Make sure you do not modify the executable image after it has been signed.
  • Do not compress/pack signed images.

Arguments

This rule has the following output arguments:

  • signature_info - Readable affected signature name (e.g. "root signature", "timestamp root signature", "nested signature (index 1)")
  • description - Readable error description
  • exception - Additional error information