Files
BinaryObjectScanner/BurnOutSharp/PackerType/Petite.cs
Matt Nadareski f9f2e0d932 Better naming
2022-05-01 17:17:15 -07:00

24 lines
751 B
C#

using BurnOutSharp.ExecutableType.Microsoft.PE;
namespace BurnOutSharp.PackerType
{
public class PEtite : IPortableExecutableCheck
{
/// <inheritdoc/>
public string CheckPortableExecutable(string file, PortableExecutable pex, bool includeDebug)
{
// Get the sections from the executable, if possible
var sections = pex?.SectionTable;
if (sections == null)
return null;
// Get the .petite section, if it exists -- TODO: Is there a version number that can be found?
bool nicodeSection = pex.ContainsSection(".petite", exact: true);
if (nicodeSection)
return "PEtite";
return null;
}
}
}