mirrors/Detect-It-Easy
2
0
Fork 0
mirror of https://github.com/horsicq/Detect-It-Easy.git synced 2026-06-24 01:54:08 +00:00
Code Issues Projects Releases Packages Wiki Activity

Include .reloc in section detection

Browse source 
Broaden the section name check to match both ".rsrc" and ".reloc" (using /. (rsrc|reloc)/i) instead of only matching "rsrc". This ensures reloc sections are counted in the resourceSectionsCounter and improves accuracy when identifying resource/relocation sections in PE parsing.
This commit is contained in:
DosX 2026-04-04 21:28:11 +03:00
commit e443ef9a2e
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
db/PE/tool_XVolkolak.6.sg
View file

@ -24,7 +24,7 @@ function detect() {
if (sectionToCheck.Characteristics & 0xe0000020) {
isRwxSectionPresent = true;
}
} else if (/rsrc/i.test(sectionToCheck.Name)) {
} else if (/.(rsrc|reloc)/i.test(sectionToCheck.Name)) {
resourceSectionsCounter++;
}
}