Matt Nadareski
|
1e20c1b147
|
Ensure packer consistency
|
2022-05-01 21:02:59 -07:00 |
|
Matt Nadareski
|
9d7cc4012c
|
Move interfaces to own namespace
|
2022-05-01 17:41:50 -07:00 |
|
Matt Nadareski
|
f9f2e0d932
|
Better naming
|
2022-05-01 17:17:15 -07:00 |
|
Matt Nadareski
|
5a7e60cabb
|
Use backward read for UPX
|
2022-03-15 00:30:33 -07:00 |
|
Matt Nadareski
|
dc252e8d86
|
Add comments around remaining SourceArray usages
|
2022-03-14 23:32:19 -07:00 |
|
Matt Nadareski
|
ceae505f4d
|
Switch order of interface parameters
|
2022-03-14 22:51:17 -07:00 |
|
Matt Nadareski
|
a7e9164f4f
|
Use SourceArray for PE checks
|
2022-03-14 22:49:35 -07:00 |
|
Matt Nadareski
|
fcbf006e4e
|
Migrate packers to new interfaces
|
2022-03-14 11:00:17 -07:00 |
|
Matt Nadareski
|
ffb529edb3
|
Granularly separate out executable types
|
2022-03-14 10:40:44 -07:00 |
|
Matt Nadareski
|
afdd032f73
|
Start using more methods to make life easier
|
2021-09-11 21:03:36 -07:00 |
|
Matt Nadareski
|
b779f2f546
|
Only deserialze a file once per round of checks
|
2021-09-10 16:10:15 -07:00 |
|
Matt Nadareski
|
5344de96b2
|
Cleanup and bugfixes; additional notes
|
2021-09-10 15:32:37 -07:00 |
|
Matt Nadareski
|
d2606e21fe
|
Convert WinRAR SFX to section based
|
2021-08-27 21:58:05 -07:00 |
|
Matt Nadareski
|
2de4f3f808
|
Continue exe organization, start IIF migration
|
2021-08-27 09:42:05 -07:00 |
|
Matt Nadareski
|
a27b3cc43f
|
Add old version UPX detection
|
2021-08-26 20:43:58 -07:00 |
|
Matt Nadareski
|
0ec6dfb287
|
Use UPX as a guinea pig for new exe handling
|
2021-08-26 15:50:38 -07:00 |
|
Matt Nadareski
|
6cde7b8bef
|
Reduce redundant code in content matchers now
|
2021-08-25 20:26:43 -07:00 |
|
Matt Nadareski
|
3ab0bcc0ae
|
ContentMatchSets are now expected in IContentCheck
|
2021-08-25 19:37:32 -07:00 |
|
Matt Nadareski
|
43845cf722
|
Rename position flag -> debug flag
|
2021-08-24 15:19:23 -07:00 |
|
Matt Nadareski
|
80905b56cd
|
Better attempt at narrowing down
|
2021-07-19 21:56:31 -07:00 |
|
Matt Nadareski
|
0a7cd8a69e
|
Comment out broader UPX (NOS) check
|
2021-07-19 21:38:19 -07:00 |
|
Matt Nadareski
|
3ac57b1c0c
|
Fix static matcher issues (fixes #51)
Note: This may result in slower, but more accurate, scans
|
2021-07-17 23:40:16 -07:00 |
|
Matt Nadareski
|
9f40a8c4c0
|
Perform some post-removal cleanup
|
2021-03-23 16:43:23 -07:00 |
|
Matt Nadareski
|
921292e077
|
Static list of content matchers
This also includes some more path matcher conversions that I couldn't reasonably split out
|
2021-03-23 09:52:09 -07:00 |
|
Matt Nadareski
|
5240f2eb70
|
Simplify util method naming
|
2021-03-22 21:32:58 -07:00 |
|
Matt Nadareski
|
6400c954ef
|
Split matchers more cleanly, comment better
|
2021-03-22 21:25:14 -07:00 |
|
Matt Nadareski
|
e47a52dbe0
|
Use framework in even more content protections
|
2021-03-22 11:43:51 -07:00 |
|
Matt Nadareski
|
7aca58a6c9
|
Better split matching code, fix UPX name
|
2021-03-22 00:41:18 -07:00 |
|
Matt Nadareski
|
ea022de022
|
Fix a couple things:
- Fix PECompact 2 version string
- Fix UPX (NOS Variant) over-matching
|
2021-03-21 23:14:37 -07:00 |
|
Matt Nadareski
|
15ae2441c3
|
Use content matching helper, part 5
|
2021-03-21 22:37:16 -07:00 |
|
Matt Nadareski
|
7e3ef544f0
|
Use content matching helper, part 2
|
2021-03-21 15:24:23 -07:00 |
|
Matt Nadareski
|
544aaed9da
|
Modify array finding, part 2
|
2021-03-20 20:47:56 -07:00 |
|
Matt Nadareski
|
cdc4d509ee
|
Modify array finding, part 1
|
2021-03-20 19:00:22 -07:00 |
|
Matt Nadareski
|
73aae8118f
|
Wrap in libmspack4n and LessIO as external code
|
2021-03-02 12:14:14 -08:00 |
|
Matt Nadareski
|
7cfa9649e4
|
Add IContentCheck interface
|
2021-02-26 01:26:49 -08:00 |
|
Matt Nadareski
|
df1e14b6c9
|
Rename NOS variant of UPX
|
2021-02-25 13:38:13 -08:00 |
|
Matt Nadareski
|
ad2d854969
|
Add versioned NOS check, fix naming
|
2021-02-25 11:27:08 -08:00 |
|
Matt Nadareski
|
61202a87fb
|
Add UPX detection for odd cases
|
2021-02-25 11:13:57 -08:00 |
|
Matt Nadareski
|
6b895fa7c8
|
Fix invalid UPX packing versions
|
2020-10-31 14:15:33 -07:00 |
|
Matt Nadareski
|
8b99577c66
|
New namespace for packers
|
2020-10-30 09:09:16 -07:00 |
|