TheRogueArchivist
e05ec3bcee
Initial addition of Rainbow Sentinel ( #166 )
...
* Initial addition of Rainbow Sentinel
* Basic detection based off of one sample, no specific research/notes.
* Update README.
* Add additional sample sources for Rainbow Sentinel
* Add additional sample sources for Rainbow Sentinel, with no new functionality.
* Add Rainbow Sentinel text checks
* Add Rainbow Sentinel text checks.
2022-11-06 21:03:23 -08:00
Matt Nadareski
703a132a61
Add missing MS-DOS stub to builders
2022-11-06 00:01:24 -07:00
Matt Nadareski
e55226e685
Add header skeletons for NE/LE/LX/PE builders
2022-11-05 23:59:38 -07:00
Matt Nadareski
9a4e6de5f9
Add MS-DOS stub to NE/LE/LX/PE builders
2022-11-05 23:52:16 -07:00
Matt Nadareski
a4e55a328c
Add boilerplate for NE, LE, PE builders
2022-11-05 23:47:50 -07:00
Matt Nadareski
2705685f07
Add placeholder LE interface ( fixes #165 )
2022-11-05 23:42:55 -07:00
Matt Nadareski
b7fb17a79f
Add skeletons for other executable types
2022-11-05 23:36:15 -07:00
Matt Nadareski
ffeb73ab7c
Add proof-of-concept MS-DOS builder
2022-11-05 23:29:04 -07:00
Matt Nadareski
427dec56e4
Add COFF archive note
2022-11-05 22:46:50 -07:00
Matt Nadareski
94ce87d953
Add PE resource classes
2022-11-05 22:45:18 -07:00
Matt Nadareski
0dc4f0f11a
Add PE load configuration directory; fix naming
2022-11-05 22:34:33 -07:00
Matt Nadareski
a1d7e65ffb
Add PE TLS directory
2022-11-05 22:11:41 -07:00
Matt Nadareski
61702d9c2a
Add PE base relocation blocks
2022-11-05 22:03:17 -07:00
Matt Nadareski
5b08bef53f
Add "missing" pieces list, so far
2022-11-05 21:54:36 -07:00
Matt Nadareski
53a6588054
Add PE hint name table entries
2022-11-05 21:49:34 -07:00
Matt Nadareski
9855c0c13e
Add PE import directory table entries
2022-11-05 21:41:33 -07:00
Matt Nadareski
c5d005bdeb
Add PE export address table entries
2022-11-05 21:37:54 -07:00
Matt Nadareski
1eb844c75b
Add PE export directory table
2022-11-05 21:34:30 -07:00
Matt Nadareski
7e177f3cbf
Add PE debug directory
2022-11-05 21:29:36 -07:00
Matt Nadareski
eb91cfbda1
Add PE delay load directory
2022-11-05 21:12:41 -07:00
Matt Nadareski
54082c1fce
Add PE attribute certificate table
2022-11-05 21:02:30 -07:00
Matt Nadareski
b5caf6dacf
Add PE COFF string table
2022-11-05 15:40:48 -07:00
Matt Nadareski
f4d1ce5388
Add PE CLR token definition symbol
2022-11-05 15:37:25 -07:00
Matt Nadareski
7d7ec69dc1
Add PE auxiliary symbol record formats
2022-11-05 15:34:14 -07:00
Matt Nadareski
7208288c00
Add PE section numbers
2022-11-05 15:16:38 -07:00
Matt Nadareski
aff3745859
Add PE COFF symbol table
2022-11-05 00:17:26 -07:00
Matt Nadareski
e103ddd216
Add PE COFF line numbers to section headers
2022-11-05 00:08:00 -07:00
Matt Nadareski
41a4965775
Add PE COFF relocations to section headers
2022-11-05 00:04:17 -07:00
Matt Nadareski
49a06f513b
Add PE section table
2022-11-04 23:56:56 -07:00
Matt Nadareski
1308f3684b
Add PE data directories
2022-11-04 23:50:54 -07:00
Matt Nadareski
c51eccac38
Add PE optional header
2022-11-04 23:41:31 -07:00
Matt Nadareski
09157767bf
Add PE COFF file header
2022-11-04 23:25:02 -07:00
Matt Nadareski
32cc2c708a
Add PE enums
2022-11-04 23:19:28 -07:00
Matt Nadareski
7f2de233fc
Add PE skeleton, change MZ stubs
2022-11-04 21:05:03 -07:00
Matt Nadareski
7cb150606c
Add LE/LX fix-up record table
2022-11-04 21:00:02 -07:00
Matt Nadareski
87cac010eb
Fill out most of FixupRecordTableEntry
2022-11-04 17:23:21 -07:00
Matt Nadareski
03926754e7
Add LE/LX FRT source offset/count
2022-11-04 16:59:29 -07:00
Matt Nadareski
65efda1a7a
Add LE/LX entry table
2022-11-04 16:51:04 -07:00
Matt Nadareski
5941d4ca16
Add skeleton for FixupRecordTableEntry
2022-11-04 16:27:01 -07:00
Matt Nadareski
e77101af89
Add LE/LX fixup record enums
2022-11-04 16:19:42 -07:00
Matt Nadareski
e766be6af9
Add LE/LX Fix-up page table
2022-11-04 16:09:20 -07:00
Matt Nadareski
95d1658324
Add LE/LX debug information
2022-11-04 16:04:01 -07:00
Matt Nadareski
9b24550738
Add LE/LX verify record directive table
2022-11-04 15:56:08 -07:00
Matt Nadareski
7947568019
Add LE/LX entry table bundle type enum
2022-11-04 15:46:24 -07:00
Matt Nadareski
399ee98923
Add LE/LX import procedure name table
2022-11-04 15:36:38 -07:00
Matt Nadareski
7b3b4a2ec5
Add LE/LX imported module name table
2022-11-04 15:31:59 -07:00
Matt Nadareski
09177da620
Add LE/LX per-page checksum table
2022-11-04 15:29:04 -07:00
Matt Nadareski
8392cfb2fa
Add LE/LX module format directives table
2022-11-04 15:24:15 -07:00
Matt Nadareski
01face7315
Add LE/LX resident name tables
2022-11-04 15:00:11 -07:00
Matt Nadareski
5b6f4d65bf
Add LE/LX resource table
2022-11-04 14:51:57 -07:00