hasherezade / sig_finder

Signature finder (from PE-bear)

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

SigFinder

Build status

Allows to find binary signatures with wildcards in a given buffer. The wildcard is defined by ? and can be used to mask one nibble. Examples of valid signatures:

23 56 12 68

55 0? 34 12

40 ?? 4? 8? e?

The list of signatures can be supplied as a file in SIG format:

<Signature name>
<Number of elements in the signature: N>
<N byte definitions>

Example:

ASProtect v1.1 MTEc
9
90 60 E8 1B ?? ?? ?? E9 FC

See also: SIG.txt

About

Signature finder (from PE-bear)

License:BSD 2-Clause "Simplified" License


Languages

Language:C++ 90.6%Language:CMake 5.4%Language:C 4.0%