VSTimeStomp
Hex editor to modify the file header and debug directory timestamps in PE files generated by the Visual Studio .NET Framework.
When I created Visual Studio Console Apps using the .NET Framework, I would get timestamps in the PE Headers of the compiled file that were way in the future. This caused AV/EDR to mark the file as more suspicious and in some cases, block execution.
Since I couldn't find a free PE editor that would modify both of these timestamps, I decided to create this script. It will take an input file, modify the PE timestamps and output a new file, while leaving the original untouched.
The default code is to change the timestamp to a random date between 1/3/2016 2:30 PM UTC and 12/15/2018 2:30 PM UTC. This can be modified in the script itself.
Usage:
python vsTimestomp.py [inputfile] [outputfile]
