Files
yara/tests/data/elf_with_imports
Vincent Thiberville 26cca748c1 fix telfhash computation on x64 specific functions (#1847)
The telfhash algorithm excludes x64 functions, see here:
https://github.com/trendmicro/telfhash/blob/d2a82f85a5b/telfhash/telfhash.py#L59

Looks like there was a copy paste error when porting this algorithm in
YARA, as the test for "is_bad_prefix" is copied, but this is not the
right test of "is_x86_64".

This PR properly fixes it.
2023-01-10 09:50:00 +01:00

17 KiB
Executable File