Skip to content
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
14 lines (11 sloc) 339 Bytes
import "pe"
import "math"
rule high_entropy_section
// ala
// TODO: allow overide of entropy threshold, with default
for any j in ( - 1): (
math.entropy(pe.sections[j].raw_data_offset, pe.sections[j].raw_data_size) >= ENT
You can’t perform that action at this time.