diff --git a/payloads/Tools/CreateVault/sign.command b/payloads/Tools/CreateVault/sign.command
index 281768a79..6c953b1df 100755
--- a/payloads/Tools/CreateVault/sign.command
+++ b/payloads/Tools/CreateVault/sign.command
@@ -60,7 +60,8 @@ fi
 
 echo "Signing OpenCore..."
 ./RsaTool -sign "${OCPath}/vault.plist" "${OCPath}/vault.sig" "${PubKey}" || abort "Failed to patch ${PubKey}"
-off=$(($(./strings -a -t d "${OCBin}" | /usr/bin/grep "=BEGIN OC VAULT=" | /usr/bin/awk '{print $1}') + 16))
+
+off=$((0x$(/usr/bin/hexdump -C "${OCBin}" | /usr/bin/grep "=BEGIN OC VAULT=" | /usr/bin/awk '{print $1}') + 16))
 if [ "${off}" -le 16 ]; then
   abort "${OCBin} is borked"
 fi