mirror of
https://github.com/vee1e/capa-rules.git
synced 2026-09-01 10:58:40 +00:00
14 lines
540 B
YAML
14 lines
540 B
YAML
rule:
|
|
meta:
|
|
name: hash data using sha256 via x86 extensions
|
|
namespace: data-manipulation/hashing/sha256
|
|
authors:
|
|
- "@_re_fox"
|
|
scopes:
|
|
static: basic block
|
|
dynamic: unsupported # requires mnemonic features
|
|
features:
|
|
- or:
|
|
- mnemonic: sha256rnds2 = Perform Two Rounds of SHA256 Operation
|
|
- mnemonic: sha256msg1 = Perform an Intermediate Calculation for the Next Four SHA256 Message Dwords
|
|
- mnemonic: sha256msg2 = Perform a Final Calculation for the Next Four SHA256 Message Dwords
|