June 18, 2007
View 2f73b97

Aspack support (experimental) The OEP is messed up - will be fixed ASAP

aCaB authored on 2007/06/18 05:55:02
April 30, 2007
View 0a3d409

use BM matcher to handle .mdb sigs

Tomasz Kojm authored on 2007/04/30 23:12:38
March 27, 2007
View 85ec399

typo in pe.c

aCaB authored on 2007/03/27 12:41:15
View 0ab9e29

move the assignment out of cli_dbgmsg

aCaB authored on 2007/03/27 12:34:18
March 20, 2007
View 4490fd9

More generic approach for ghost detection/fixup on rebuild. Better handling of rebuilt headers size with lots of sects. Nested (2+) petite packed files still result in Broken.Executable but they're indeed broken - not too elegant, but...

aCaB authored on 2007/03/20 12:57:21
View 9c0614e

sizeofheaders check making room for ghosts in petite: all useless efforts since now we break on OEP out of file blah

aCaB authored on 2007/03/20 05:00:13
March 19, 2007
View 21bf52c

sync cli_peheader and cleanup

aCaB authored on 2007/03/19 09:35:27
March 15, 2007
View 5deedfa

- remove hardcoded header size - fix check for 1st sect rva

aCaB authored on 2007/03/15 07:26:54
View 6e075ed

typo in Upack

aCaB authored on 2007/03/15 05:36:31
View de800f2

checking/fixing packers... #3

aCaB authored on 2007/03/15 02:42:55
View 972c048

checking/fixing packers... #2

aCaB authored on 2007/03/15 00:48:19
March 14, 2007
View 9a25caf

checking/fixing packers...

aCaB authored on 2007/03/14 23:50:05
View e9d44a2

hacked cli_exe_sextions to allow for unaligned values and characteristics

aCaB authored on 2007/03/14 11:53:08
View fa4f9e8

Started to break things

aCaB authored on 2007/03/14 07:50:40
March 13, 2007
View ee99255

extract and scan PE files embedded into other executables or fake zip files generated by some worms

Tomasz Kojm authored on 2007/03/13 06:31:40