Matt Nadareski
|
b779f2f546
|
Only deserialze a file once per round of checks
|
2021-09-10 16:10:15 -07:00 |
|
Matt Nadareski
|
5344de96b2
|
Cleanup and bugfixes; additional notes
|
2021-09-10 15:32:37 -07:00 |
|
Matt Nadareski
|
2400f2d0ad
|
Convert PEC to section based; add notes
|
2021-08-27 14:28:17 -07:00 |
|
Matt Nadareski
|
6cde7b8bef
|
Reduce redundant code in content matchers now
|
2021-08-25 20:26:43 -07:00 |
|
Matt Nadareski
|
3ab0bcc0ae
|
ContentMatchSets are now expected in IContentCheck
|
2021-08-25 19:37:32 -07:00 |
|
Matt Nadareski
|
43845cf722
|
Rename position flag -> debug flag
|
2021-08-24 15:19:23 -07:00 |
|
SilasLaspada
|
1188cad5e6
|
Slightly improve PE Compact version detection (#40)
* Slightly improve PE Compact version detection
* Address comments
* Address comments
|
2021-06-24 11:58:38 -07:00 |
|
Matt Nadareski
|
1672c73a57
|
Fix PECompact scanning
Thanks Silas for noticing the regression
|
2021-03-25 15:25:15 -07:00 |
|
Matt Nadareski
|
5240f2eb70
|
Simplify util method naming
|
2021-03-22 21:32:58 -07:00 |
|
Matt Nadareski
|
6400c954ef
|
Split matchers more cleanly, comment better
|
2021-03-22 21:25:14 -07:00 |
|
Matt Nadareski
|
e47a52dbe0
|
Use framework in even more content protections
|
2021-03-22 11:43:51 -07:00 |
|
Matt Nadareski
|
7aca58a6c9
|
Better split matching code, fix UPX name
|
2021-03-22 00:41:18 -07:00 |
|
Matt Nadareski
|
ea022de022
|
Fix a couple things:
- Fix PECompact 2 version string
- Fix UPX (NOS Variant) over-matching
|
2021-03-21 23:14:37 -07:00 |
|
Matt Nadareski
|
15ae2441c3
|
Use content matching helper, part 5
|
2021-03-21 22:37:16 -07:00 |
|
Matt Nadareski
|
cf9bd99f3d
|
Use content matching helper, part 4
|
2021-03-21 22:19:38 -07:00 |
|
Matt Nadareski
|
7e3ef544f0
|
Use content matching helper, part 2
|
2021-03-21 15:24:23 -07:00 |
|
SilasLaspada
|
9bff6d5fe1
|
Improve version detection (#29)
* Improve version detection
* Address comments
* Address comments
Co-authored-by: Matt Nadareski <mnadareski@outlook.com>
|
2021-03-20 21:29:19 -07:00 |
|
Matt Nadareski
|
544aaed9da
|
Modify array finding, part 2
|
2021-03-20 20:47:56 -07:00 |
|
Matt Nadareski
|
cdc4d509ee
|
Modify array finding, part 1
|
2021-03-20 19:00:22 -07:00 |
|
Matt Nadareski
|
73aae8118f
|
Wrap in libmspack4n and LessIO as external code
|
2021-03-02 12:14:14 -08:00 |
|
Matt Nadareski
|
7cfa9649e4
|
Add IContentCheck interface
|
2021-02-26 01:26:49 -08:00 |
|
Matt Nadareski
|
8b99577c66
|
New namespace for packers
|
2020-10-30 09:09:16 -07:00 |
|