Skip to content

Commit

Permalink
Removed a false positive in the PEiD rules (fixes #32).
Browse files Browse the repository at this point in the history
Added a new revision number for Visual Studio.
  • Loading branch information
JusticeRage committed Jun 21, 2018
1 parent 3577518 commit b95f460
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 14 deletions.
13 changes: 0 additions & 13 deletions bin/yara_rules/peid.yara
Original file line number Diff line number Diff line change
Expand Up @@ -5063,19 +5063,6 @@ condition:
$a0 at manape.ep
}


rule PolyEnE_V0_01_____Lennart_Hedlund
{
meta:
packer_name = "PolyEnE V0.01+ -> Lennart Hedlund"
strings:
$a0 = { 50 6F 6C 79 45 6E 45 00 4D 65 73 73 61 67 65 42 6F 78 41 00 55 53 45 52 33 32 2E 64 6C 6C }

condition:
$a0
}


rule __PseudoSigner_0_2__MinGW_GCC_2_x______Anorganix
{
meta:
Expand Down
3 changes: 2 additions & 1 deletion manape/nt_values.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -635,7 +635,8 @@ const flag_dict COMP_ID_PRODID =
("VS2017 v15.5.4 build 25834", 0x64ea)
("VS2017 v15.?.? build 25930", 0x654a)
("VS2017 v15.6.5 build 26129", 0x6611)

("VS2017 v15.6.6 build 26129", 0x6613)
("VS2017 v15.7.4 build 26431", 0x673F)
;

// ----------------------------------------------------------------------------
Expand Down

0 comments on commit b95f460

Please sign in to comment.