vee1e/capa-rules
1
0
Fork 0
mirror of https://github.com/vee1e/capa-rules.git synced 2026-09-01 19:07:15 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
capa-rules/load-code/pe
History
Ana Maria Martinez Gomez 684f817111
add load-code/pe/rebuild-import-table.yml 
Identify rebuilding of import table, used in reflective-dll-injection.
References:
- https://0x00sec.org/t/reflective-dll-injection/3080
- https://www.ired.team/offensive-security/code-injection-process-injection/reflective-dll-injection
2021-03-25 19:34:47 +01:00
..
access-pe-header.yml
enumerate-pe-sections.yml add load-code/pe/enumerate-pe-sections.yml 2021-03-25 19:34:31 +01:00
parse-pe-header.yml rule updates based on PMA labs 2021-03-22 09:45:56 +01:00
rebuild-import-table.yml add load-code/pe/rebuild-import-table.yml 2021-03-25 19:34:47 +01:00