VirusTotal/yara
1
0
Fork 0
mirror of https://github.com/VirusTotal/yara.git synced 2026-10-11 22:49:58 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,279 Commits 5 Branches 56 Tags
master
Commit Graph
7 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
HoundThe 125e404934 Fix ELF module compiler uninitialized free warning (#1751) 2022-07-21 12:22:24 +02:00
HoundThe 86b0e3f7c7 Fix unaligned read and missing length check in read_blob_*. (#1742) 
Add depth limit in namespace recursion due to the possible loops.
 2022-07-12 10:23:07 +02:00
HoundThe 2c1457bef4 Explain is_signed and verified of the authenticode signatures (#1738) 2022-06-28 10:13:27 +02:00
HoundTheandVictor M. Alvarez 15ec337e04 Add parsing of .NET user types from .NET metadata stream (#1605) 
* Add simple_str string implementation

* Add ability to parse .NET user defined types to 'dotnet' module

* Add copyright information

* Unify comment style, define iter variable within for loop

* Fix invalid handling of corrupted parameters

* Remove duplicate test_dotnet in BUILD.bazel

* Fix unaligned memory access. (#1)

* Fix unaligned memory access.

* Add missing comma in Bazel file.

Co-authored-by: Victor M. Alvarez <[email protected]>
 2022-06-23 12:36:22 +02:00
HoundTheandVictor M. Alvarez b9cd46df15 Process Authenticode signatures using authenticode-parser (#1623) 
* Import authenticode-parser into Yara. Rewrite PE signature processing using the authenticode-parser. Update bazel OpenSSL dependency to 1.1.1 from 1.1.0

* Forgot to include structs.c

* Add Avast to authors and myself to contributors

* Set forgotten algorithm_oid

* Fix incorrect indentation

* Fix race condition when initializing openssl objects

* Don't malloc ByteArray with length 0

* Auth. parser update - bug fixes, openssl3.0 support

* Update authenticode parser

Co-authored-by: Victor M. Alvarez <[email protected]>
 2022-06-20 12:47:36 +02:00
HoundThe 19ac2efeb8 Integrate tlshc library, calculate telfhash and import hash in ELF module (#1624) 
* Add simple_str string implementation

* Integrate tlshc library, calculate telfhash and import hash in the ELF module.

* Hide usage of MD5 into #ifdef crypto
 2022-06-20 12:25:33 +02:00
HoundThe d6dc91b8f0 Add function pe.is_dotnet() for .NET file detection (#1568) 2022-02-25 11:08:22 +01:00