mirror of
https://github.com/vee1e/capa-rules.git
synced 2026-09-01 10:58:40 +00:00
15 lines
605 B
YAML
15 lines
605 B
YAML
rule:
|
|
meta:
|
|
name: hash data using sha1 via x86 extensions
|
|
namespace: data-manipulation/hashing/sha1
|
|
authors:
|
|
- "@_re_fox"
|
|
scopes:
|
|
static: basic block
|
|
dynamic: unsupported # requires mnemonic features
|
|
features:
|
|
- or:
|
|
- mnemonic: sha1rnds4 = Perform Four Rounds of SHA1 Operation
|
|
- mnemonic: sha1nexte = Calculate SHA1 State Variable E after Four Rounds
|
|
- mnemonic: sha1msg1 = Perform an Intermediate Calculation for the Next Four SHA1 Message Dwords
|
|
- mnemonic: sha1msg2 = Perform a Final Calculation for the Next Four SHA1 Message Dwords
|