Skip to content

Exposing IMAGE_RESOURCE_DIRECTORY fields and removing Characteristics…#390

Open
gljiva wants to merge 1 commit into
VirusTotal:masterfrom
gljiva:resources
Open

Exposing IMAGE_RESOURCE_DIRECTORY fields and removing Characteristics…#390
gljiva wants to merge 1 commit into
VirusTotal:masterfrom
gljiva:resources

Conversation

@gljiva
Copy link
Copy Markdown

@gljiva gljiva commented Jan 4, 2016

IMAGE_RESOURCE_DIRECTORY fields are currently treated as variables which doesn't account for multiple directories having different field values. Creating struct array for resources_dir to reflect this which enables for the following signatures:
for any i in (0 .. pe.number_of_resources_dir - 1) : ( pe.resources_dir[i].characteristics == 0xbadc00de )

Also removing resource_dir->Characteristics sanity check as the Characteristics field can have arbitrary value.

Fixes #295.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant