A forum for reverse engineering, OS internals and malware analysis 

Discussion on reverse-engineering and debugging.
 #33191  by Iradicator
 Thu Sep 19, 2019 5:41 am
Hi, I've got my application EXE file, and i wish to create many version of this file, each one with a different icon.
However, I wish to sign the file one time instead of creating many versions of this file, each one signed with a different embedded icon.

so I was wondering if there's a way to somehow externalize the .rsrc section from the pe file, so it's not be part of the signature.

Perhaps do you know of a way to specify an external path of a valid .ico file anywhere in the PE file ? maybe there's an API for this ?

I've read the documentation of the manifest embedded xml inside the .rsrc, but couldn't find and configuration do so ...

ResourceHacker.exe and other helper tools only works on embedding the icon... but perhaps there's some undocumented way making the .rsrc point an external icon file.

thanks !