33 Commits

Author	SHA1	Message	Date
Matt Nadareski	a498513662	Add note to PECompact	2022-07-13 12:52:20 -07:00
Matt Nadareski	1e20c1b147	Ensure packer consistency	2022-05-01 21:02:59 -07:00
Matt Nadareski	9d7cc4012c	Move interfaces to own namespace	2022-05-01 17:41:50 -07:00
Matt Nadareski	f9f2e0d932	Better naming	2022-05-01 17:17:15 -07:00
Matt Nadareski	ceae505f4d	Switch order of interface parameters	2022-03-14 22:51:17 -07:00
Matt Nadareski	a7e9164f4f	Use SourceArray for PE checks	2022-03-14 22:49:35 -07:00
Matt Nadareski	fcbf006e4e	Migrate packers to new interfaces	2022-03-14 11:00:17 -07:00
Matt Nadareski	ffb529edb3	Granularly separate out executable types	2022-03-14 10:40:44 -07:00
Matt Nadareski	afdd032f73	Start using more methods to make life easier	2021-09-11 21:03:36 -07:00
Matt Nadareski	214e8d41c7	Pre-read 3 most commonly-used section data ... This also adds comprehensive notes around the sections used in various protections, how they're used, and what we can do with them. It also adds a couple of various notes based on the findings from the protection audit	2021-09-11 16:47:25 -07:00
Matt Nadareski	f2b9e3a31b	Clean up a significant number of TODOs	2021-09-11 00:32:48 -07:00
Matt Nadareski	b779f2f546	Only deserialze a file once per round of checks	2021-09-10 16:10:15 -07:00
Matt Nadareski	5344de96b2	Cleanup and bugfixes; additional notes	2021-09-10 15:32:37 -07:00
Matt Nadareski	2400f2d0ad	Convert PEC to section based; add notes	2021-08-27 14:28:17 -07:00
Matt Nadareski	6cde7b8bef	Reduce redundant code in content matchers now	2021-08-25 20:26:43 -07:00
Matt Nadareski	3ab0bcc0ae	ContentMatchSets are now expected in IContentCheck	2021-08-25 19:37:32 -07:00
Matt Nadareski	43845cf722	Rename position flag -> debug flag	2021-08-24 15:19:23 -07:00
SilasLaspada	1188cad5e6	Slightly improve PE Compact version detection (#40) ... * Slightly improve PE Compact version detection * Address comments * Address comments	2021-06-24 11:58:38 -07:00
Matt Nadareski	1672c73a57	Fix PECompact scanning ... Thanks Silas for noticing the regression	2021-03-25 15:25:15 -07:00
Matt Nadareski	5240f2eb70	Simplify util method naming	2021-03-22 21:32:58 -07:00
Matt Nadareski	6400c954ef	Split matchers more cleanly, comment better	2021-03-22 21:25:14 -07:00
Matt Nadareski	e47a52dbe0	Use framework in even more content protections	2021-03-22 11:43:51 -07:00
Matt Nadareski	7aca58a6c9	Better split matching code, fix UPX name	2021-03-22 00:41:18 -07:00
Matt Nadareski	ea022de022	Fix a couple things: ... - Fix PECompact 2 version string - Fix UPX (NOS Variant) over-matching	2021-03-21 23:14:37 -07:00
Matt Nadareski	15ae2441c3	Use content matching helper, part 5	2021-03-21 22:37:16 -07:00
Matt Nadareski	cf9bd99f3d	Use content matching helper, part 4	2021-03-21 22:19:38 -07:00
Matt Nadareski	7e3ef544f0	Use content matching helper, part 2	2021-03-21 15:24:23 -07:00
SilasLaspada	9bff6d5fe1	Improve version detection (#29) ... * Improve version detection * Address comments * Address comments Co-authored-by: Matt Nadareski <mnadareski@outlook.com>	2021-03-20 21:29:19 -07:00
Matt Nadareski	544aaed9da	Modify array finding, part 2	2021-03-20 20:47:56 -07:00
Matt Nadareski	cdc4d509ee	Modify array finding, part 1	2021-03-20 19:00:22 -07:00
Matt Nadareski	73aae8118f	Wrap in libmspack4n and LessIO as external code	2021-03-02 12:14:14 -08:00
Matt Nadareski	7cfa9649e4	Add IContentCheck interface	2021-02-26 01:26:49 -08:00
Matt Nadareski	8b99577c66	New namespace for packers	2020-10-30 09:09:16 -07:00