capa-rules/load-code/pe
Ana Maria Martinez Gomez b7aa190381
add load-code/pe/parse-pe-exports.yml
Identify parsing PE export data, used when writing your own
`GetProcAddress()` implementation.

reference: Practical Malware Analysis, Chapter 19

f
2021-03-25 19:34:47 +01:00
..
access-pe-header.yml
enumerate-pe-sections.yml add load-code/pe/enumerate-pe-sections.yml 2021-03-25 19:34:31 +01:00
parse-pe-exports.yml add load-code/pe/parse-pe-exports.yml 2021-03-25 19:34:47 +01:00
parse-pe-header.yml
rebuild-import-table.yml add load-code/pe/rebuild-import-table.yml 2021-03-25 19:34:47 +01:00