Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Computation of section entropies for ELF, MACHO and PE (in progress) #501

Closed
wants to merge 39 commits into from
Closed
Changes from 1 commit
Commits
Show all changes
39 commits
Select commit Hold shift + click to select a range
d4f448f
VB header parsing
pruzko Nov 16, 2018
e486337
project info header parsing I.
pruzko Nov 16, 2018
25cd4b9
fileinfo wrapper
pruzko Dec 12, 2018
0edf72e
fileinfo wrapper
pruzko Dec 12, 2018
8de01b1
string utils
pruzko Dec 12, 2018
fe1b65d
etern table plain presentation
pruzko Dec 13, 2018
68160c4
Visual Basic Objects presentation
pruzko Dec 13, 2018
0e73efe
some more presentation
pruzko Dec 18, 2018
2cff3fe
presentation of language and project related stuff
pruzko Jan 31, 2019
ff31384
extern and object table hashes
pruzko Jan 31, 2019
a533784
obj table hash presentation
pruzko Feb 1, 2019
ce2096a
doxygen fix
pruzko Feb 1, 2019
da87bfe
basic json presentation
pruzko Feb 1, 2019
5c64274
extern and object tables json presentation
pruzko Feb 1, 2019
eda798f
COM Registration Data extraction and presentation + object Table GUID
pruzko Feb 4, 2019
72fd3b9
prefix cut for project path
pruzko Feb 5, 2019
7fc8f94
modification for clawler needs
pruzko Feb 5, 2019
e4b2049
addresses fixed
pruzko Feb 8, 2019
c7138cb
export table extraction fixed
pruzko Feb 9, 2019
70431d8
COM Registration Info parsed
pruzko Feb 9, 2019
338de0e
COM Registration Info plain presentation
pruzko Feb 9, 2019
6b3e171
COM Registration Info json presentation
pruzko Feb 9, 2019
f748b61
modification for crawler only
pruzko Feb 11, 2019
6b54ce6
ascii parsing fixed and VB presentation fixed
pruzko Feb 11, 2019
aa53bc5
relicts removed
pruzko Feb 11, 2019
3121e8c
empty object table presentation fixed
pruzko Feb 12, 2019
26df133
entropy function
pruzko Feb 14, 2019
27a494c
elf sections
pruzko Feb 14, 2019
771ae2a
PE and fileformat
pruzko Feb 14, 2019
c7e5c34
more PE and macho
pruzko Feb 14, 2019
551fb3c
fileinfo and presentation
pruzko Feb 14, 2019
0a7d70b
undefined entropy fix
pruzko Feb 15, 2019
48e3078
section parsing bug fixed
pruzko Feb 15, 2019
8445769
section for coff and other formats added
pruzko Feb 15, 2019
89529ed
overlay entropy
pruzko Feb 16, 2019
20a8e7a
overlay entropy fix'd
pruzko Feb 16, 2019
2c340a8
rebased and fixed based on PR comments
pruzko Feb 21, 2019
b8dfaeb
reinterpret cast added
pruzko Feb 21, 2019
70d21b4
header for array added
pruzko Feb 21, 2019
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
obj table hash presentation
pruzko committed Feb 21, 2019
commit a533784c471ffab9a482998050df6ffac7193dc9
13 changes: 10 additions & 3 deletions src/fileinfo/file_presentation/plain_presentation.cpp
Original file line number Diff line number Diff line change
@@ -636,7 +636,13 @@ void PlainPresentation::presentVisualBasicObjects() const
}

std::cout << "\n";
std::cout << "Visual Basic objects" << "\n";
std::cout << "Visual Basic Object table" << "\n";
std::cout << "-------------------------" << "\n";
std::cout << "CRC32 : " << fileinfo.getVisualBasicObjectTableHashCrc32() << "\n";
std::cout << "MD5 : " << fileinfo.getVisualBasicObjectTableHashMd5() << "\n";
std::cout << "SHA256 : " << fileinfo.getVisualBasicObjectTableHashSha256() << "\n";
std::cout << "\n";
std::size_t cnt = 0;
for (std::size_t i = 0; i < nObjs; i++)
{
auto obj = fileinfo.getVisualBasicObject(i);
@@ -649,11 +655,12 @@ void PlainPresentation::presentVisualBasicObjects() const
{
continue;
}
std::cout << " object name: " << objName << "\n";
std::cout << cnt << ". " << "object name: " << objName << "\n";
for (const auto &m : obj->getMethods())
{
std::cout << " method name: " << m << "\n";
std::cout << " method name: " << m << "\n";
}
cnt++;
}
}