Skip to content

v0.2.2
Compare
Choose a tag to compare
@hasherezade hasherezade released this 15 Aug 17:13
· 1098 commits to master since this release
v0.2.2
fce3603

pesieve_22

FEATURE

  • Report about PEs with modified headers separately (do not treat them as replaced). Show details about what part of the PE header was modified.

BUGFIX

  • Fixed: imports for remapped modules were not rebuilded.
  • Fixed: imports for 64bit shellcodes were not recognized. (The shellcode bitness should be recognized before searching its imports.)
  • Improved accuracy of searching beginning of the implanted module
  • Fixed: invalid limits for workingset scan (causing the highest pages remaining unscanned)
  • Fixed: unneccessery changes in the alignments of the implanted PE (Issue #39)
Assets 6
Loading