Skip to content

Commit

Permalink
Fixed MapVirtualKey not being detected correctly in the imports plugin.
Browse files Browse the repository at this point in the history
Updated the PRODID list with the latest Visual Studio revision numbers.
  • Loading branch information
JusticeRage committed Sep 12, 2018
1 parent a96383c commit 749d807
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 1 deletion.
3 changes: 3 additions & 0 deletions manape/nt_values.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -659,6 +659,9 @@ const flag_dict COMP_ID_PRODID =
("VS2017 v15.7.5 compiler 26433", 0x6741)
("VS 2015/2017 runtime 26706", 0x6852)
("VS2017 v15.8.1 compiler 26726", 0x6866)
("VS2017 v15.8.2 compiler 26727", 0x6867)
("VS2017 v15.8.3 compiler 26728", 0x6868)
("VS2017 v15.8.4 compiler 26729", 0x6869)
;

// ----------------------------------------------------------------------------
Expand Down
2 changes: 1 addition & 1 deletion plugins/plugin_imports.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ std::string atom_bombing = "GlobalAddAtom(A|W)|GlobalGetAtomName(A|W)|QueueUserA

std::string process_doppelganging = "CreateTransaction|CreateFileTransacted|RollbackTransaction|WriteFile";

std::string keylogger_api = "SetWindowsHook(Ex)?|GetAsyncKeyState|GetForegroundWindow|AttachThreadInput|CallNextHook(Ex)?|MapVirtualKey";
std::string keylogger_api = "SetWindowsHook(Ex)?|GetAsyncKeyState|GetForegroundWindow|AttachThreadInput|CallNextHook(Ex)?|MapVirtualKey(A|W|Ex)";

std::string raw_socket_api = "accept|bind|connect|recv|send|gethost(by)?name|inet_addr";

Expand Down

0 comments on commit 749d807

Please sign in to comment.