mirror of https://github.com/WerWolv/ImHex.git
feat: Added a basic C++ and MSVC detector yara signature
This commit is contained in:
parent
daf007fae7
commit
e28b72e356
|
@ -0,0 +1,25 @@
|
|||
rule CppExecutable {
|
||||
meta:
|
||||
category = "Programming Language"
|
||||
name = "C++"
|
||||
|
||||
strings:
|
||||
$exception_windows = "_CxxThrowException" ascii fullword
|
||||
$iostreams = "iostream" ascii
|
||||
|
||||
condition:
|
||||
any of them
|
||||
}
|
||||
|
||||
rule CppMSVC {
|
||||
meta:
|
||||
category = "Compiler"
|
||||
name = "MSVC"
|
||||
|
||||
strings:
|
||||
$iostreams_mangled_name = "$basic_iostream@DU" ascii
|
||||
$std_namespace = "@@std@@" ascii
|
||||
|
||||
condition:
|
||||
any of them and CppExecutable
|
||||
}
|
Loading…
Reference in New Issue