September 15, 2018
View 64ecd10

Fix support for authenticode signatures from external .cat files This commit adds back in support for whitelisting files based on signatures from .cat files loaded in via a '-d' flag to clamscan. This also makes it so that a .crb blacklist rule match can't be overruled by a signature in a .cat file

Andrew authored on 2018/09/15 03:39:47
September 6, 2018
View ecae7f1

Fix bug in how ptrs to file data are used for computing Authenticode hash We used to get a pointer to file data without locking and for some samples this pointer would be invalidated by the time we used it. Now, we just store the offset for the sections that should be hashed as part of the Authenticode hash computation and get the file data pointer right before it's needed.

Andrew authored on 2018/09/06 07:50:59
September 2, 2018
View c714559

Add support for MD5 and SHA256 hash-based validation of the exe code Also refactors the code a bit to consolidate some duplicate functionality

Andrew authored on 2018/09/02 12:29:45
September 18, 2015
View 46a35ab

mass update of copyright headers

Mickey Sola authored on 2015/09/18 02:41:26
October 28, 2012
View 56b4f4b

Change the cert management code to cache the trusted/revoked root certs in the engine struct

Shawn Webb authored on 2012/10/28 03:58:03
January 8, 2012
View 0393aa5

cli_checkfp_pe

aCaB authored on 2012/01/08 11:19:29
January 5, 2012
View d1fcd16

merge master

aCaB authored on 2012/01/05 06:55:07
January 3, 2012
View 7cb86fa

few fixmes fixed

aCaB authored on 2012/01/03 23:46:20
December 31, 2011
View 6bc5d0c

embedded authenticode verification

aCaB authored on 2011/12/31 00:07:53
December 30, 2011
View 3a55c60

refactor

aCaB authored on 2011/12/30 23:01:50
View 5d49bd0

readd (broken) support for emb cats

aCaB authored on 2011/12/30 03:39:19
View 774120f

temp commit

aCaB authored on 2011/12/30 01:14:34
December 29, 2011
View d29b5c5

refactor expect_obj

aCaB authored on 2011/12/29 19:53:07
December 25, 2011
View 7bcfb2f

TL;DR: a bunch of stuff

aCaB authored on 2011/12/25 11:49:38
December 22, 2011
View 8997495

crtmgr_add

aCaB authored on 2011/12/22 06:52:46