SabreTools/BinaryObjectScanner
1
0
Fork 0
mirror of https://github.com/SabreTools/BinaryObjectScanner.git synced 2026-07-20 07:45:07 +00:00
Code Issues 295 Packages Projects Releases 20 Wiki Activity

Add IContentCheck interface

Browse Source
This commit is contained in:
Matt Nadareski
2021-02-26 01:26:49 -08:00
parent c6eaafebbe
commit 7cfa9649e4
47 changed files with 195 additions and 136 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
BurnOutSharp/PackerType/Armadillo.cs
View File

@@ -1,8 +1,9 @@
namespace BurnOutSharp.PackerType
{
public class Armadillo
public class Armadillo : IContentCheck
{
public static string CheckContents(byte[] fileContent, bool includePosition = false)
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
// ".nicode" + (char)0x00
byte[] check = new byte[] { 0x2E, 0x6E, 0x69, 0x63, 0x6F, 0x64, 0x65, 0x00 };

5
BurnOutSharp/PackerType/EXEStealth.cs
View File

@@ -1,8 +1,9 @@
namespace BurnOutSharp.PackerType
{
public class EXEStealth
public class EXEStealth : IContentCheck
{
public static string CheckContents(byte[] fileContent, bool includePosition = false)
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
// "??[[__[[_" + (char)0x00 + "{{" + (char)0x0 + (char)0x00 + "{{" + (char)0x00 + (char)0x00 + (char)0x00 + (char)0x00 + (char)0x0 + (char)0x00 + (char)0x00 + (char)0x00 + (char)0x00 + "?;??;??"
byte[] check = new byte[] { 0x3F, 0x3F, 0x5B, 0x5B, 0x5F, 0x5F, 0x5B, 0x5B, 0x5F, 0x00, 0x7B, 0x7B, 0x00, 0x00, 0x7B, 0x7B, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x20, 0x3F, 0x3B, 0x3F, 0x3F, 0x3B, 0x3F, 0x3F };

5
BurnOutSharp/PackerType/NSIS.cs
View File

@@ -4,9 +4,10 @@ using System.Text;
namespace BurnOutSharp.PackerType
{
public class NSIS
public class NSIS : IContentCheck
{
public static string CheckContents(byte[] fileContent, bool includePosition = false)
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
// Nullsoft Install System
byte[] check = new byte[] { 0x4e, 0x75, 0x6c, 0x6c, 0x73, 0x6f, 0x66, 0x74, 0x20, 0x49, 0x6e, 0x73, 0x74, 0x61, 0x6c, 0x6c, 0x20, 0x53, 0x79, 0x73, 0x74, 0x65, 0x6d };

5
BurnOutSharp/PackerType/PECompact.cs
View File

@@ -1,8 +1,9 @@
namespace BurnOutSharp.PackerType
{
public class PECompact
public class PECompact : IContentCheck
{
public static string CheckContents(byte[] fileContent, bool includePosition = false)
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
// "PEC2"
byte[] check = new byte[] { 0x50, 0x45, 0x43, 0x32 };

5
BurnOutSharp/PackerType/UPX.cs
View File

@@ -2,9 +2,10 @@ using System.Text;
namespace BurnOutSharp.PackerType
{
public class UPX
public class UPX : IContentCheck
{
public static string CheckContents(byte[] fileContent, bool includePosition = false)
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
// UPX!
byte[] check = new byte[] { 0x55, 0x50, 0x58, 0x21 };

5
BurnOutSharp/PackerType/dotFuscator.cs
View File

@@ -1,8 +1,9 @@
namespace BurnOutSharp.PackerType
{
public class dotFuscator
public class dotFuscator : IContentCheck
{
public static string CheckContents(byte[] fileContent, bool includePosition = false)
/// <inheritdoc/>
public string CheckContents(string file, byte[] fileContent, bool includePosition = false)
{
// "DotfuscatorAttribute"
byte[] check = new byte[] { 0x44, 0x6F, 0x74, 0x66, 0x75, 0x73, 0x63, 0x61, 0x74, 0x6F, 0x72, 0x41, 0x74, 0x74, 0x72, 0x69, 0x62, 0x75, 0x74, 0x65 };