mirror of
https://github.com/WerWolv/ImHex.git
synced 2026-03-28 07:47:03 -05:00
feat: Added a basic C++ and MSVC detector yara signature
This commit is contained in:
25
plugins/yara_rules/romfs/rules/language.yar
Normal file
25
plugins/yara_rules/romfs/rules/language.yar
Normal file
@@ -0,0 +1,25 @@
|
||||
rule CppExecutable {
|
||||
meta:
|
||||
category = "Programming Language"
|
||||
name = "C++"
|
||||
|
||||
strings:
|
||||
$exception_windows = "_CxxThrowException" ascii fullword
|
||||
$iostreams = "iostream" ascii
|
||||
|
||||
condition:
|
||||
any of them
|
||||
}
|
||||
|
||||
rule CppMSVC {
|
||||
meta:
|
||||
category = "Compiler"
|
||||
name = "MSVC"
|
||||
|
||||
strings:
|
||||
$iostreams_mangled_name = "$basic_iostream@DU" ascii
|
||||
$std_namespace = "@@std@@" ascii
|
||||
|
||||
condition:
|
||||
any of them and CppExecutable
|
||||
}
|
||||
Reference in New Issue
Block a user