v0.6.5.2

hasherezade released this 08 Mar 18:46

· 324 commits to main since this release

74b4b8b

BUGFIX

Fixes in bearparser, including:
- Fixed error in mapping Raw Size to Virtual Size (when Virtual Size is smaller) - Issue: hasherezade/bearparser#20
- Fixed error in getting the last mapped address: exclude empty sections - Issue: hasherezade/bearparser#21
- Fixed an error in RVA/raw conversion in case of malformed (overlapping) Virtual Sections
- Recognize Thumb2 PE files

FEATURE

Change interpretation of the TimeStamp field if the executable was build as reproducible
Improved alerts about samples containing unusual features or malformations, including
- alert about .NET samples that may contain native code
Better integration on Linux and other *nixes - desktop launcher, etc. #21

REFACT

Code cleanup, replaced some deprecated Qt functions with new equivalents

Assets 10