SpecAbstract::SCAN_OPTIONS pScanOptions = {};
QFile file(sFileName);
if (!file.open(QIODevice::ReadOnly)) {
return;
}
QByteArray fileContents = file.readAll();
file.close();
SpecAbstract::SCAN_RESULT scanResult = StaticScan::processMemory(fileContents.data(), fileContents.size(), &pScanOptions);
for (int i = 0; i < scanResult.listRecords.size(); ++i) {
qDebug("(%d) (%s) (%s)", i,
scanResult.listRecords[i].sInfo.toLatin1().data(),
SpecAbstract::recordNameIdToString(scanResult.listRecords[i].name).toLatin1().data());
}
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open
QIODevice::seek (QBuffer): The device is not open (repeated many more times)
(0) () (Unknown)
SpecAbstract::SCAN_OPTIONS pScanOptions = {};
SpecAbstract::SCAN_RESULT scanResult = {};
StaticScan staticScan;
staticScan.setData(sFileName, &pScanOptions, &scanResult);
staticScan.process();
staticScan.stop();
for (int i = 0; i < scanResult.listRecords.size(); ++i) {
qDebug("(%d) (%s) (%s)", i,
scanResult.listRecords[i].sInfo.toLatin1().data(),
SpecAbstract::recordNameIdToString(scanResult.listRecords[i].name).toLatin1().data());
}
Import hash: 6dc0ba9c9 1a6ff5f
KERNEL32.DLL LoadLibraryA
KERNEL32.DLL GetProcAddress
KERNEL32.DLL VirtualProtect
KERNEL32.DLL VirtualAlloc
KERNEL32.DLL VirtualFree
KERNEL32.DLL ExitProcess
advapi32.dll RegCloseKey
comctl32.dll ImageList_Add
gdi32.dll SaveDC
oleaut32.dll VariantCopy
user32.dll GetDC
version.dll VerQueryValueA
=====================================================================
Import hash: 7bc87a20
KERNEL32.DLL LoadLibraryA
KERNEL32.DLL GetProcAddress
KERNEL32.DLL VirtualProtect
KERNEL32.DLL VirtualAlloc
KERNEL32.DLL VirtualFree
KERNEL32.DLL ExitProcess
Import hash: 6e41b036
advapi32.dll RegCloseKey
Import hash: 4024bd8d
comctl32.dll ImageList_Add
Import hash: b6bee3d3
gdi32.dll SaveDC
Import hash: f6fecd5
oleaut32.dll VariantCopy
Import hash: 3ca3511b
user32.dll GetDC
Import hash: 6b623ce5
version.dll VerQueryValueA
SIGNATURE SCAN: Linker: Turbo linker()[]
SIGNATURE SCAN: Packer: UPX(0.81-3.81+)[exe]
SIGNATURE SCAN: Packer: Generic()[]
SIGNATURE SCAN: Certificate: Windows Authenticode(2.0)[PKCS #7]
CONST SCAN: Packer: UPX(2.90-3.XX)[exe]
CONST SCAN: Packer: NsPack()[]
RESOURCES SCAN: Library: Visual Component Library()[]
QSet()
(0) (I386, 32-bit, GUI) (Windows)
(1) () (Turbo linker)
(2) () (Borland Object Pascal(Delphi))
(3) () (Object Pascal(Delphi))
(4) () (Visual Component Library)
(5) () (Borland Delphi)
(6) (PKCS #7) (Windows Authenticode)
(7) (NRV2E_LE32,brute) (UPX)
Now my C++ may not be the sharpest but I would expect the same results for both approaches. Is there something I'm doing wrong?
Detect It Easy is a program for determining types of files for Windows, Linux and MacOS.
XAPKDetector is Android/APK/DEX detector for Windows, Linux and MacOS.
XOpcodeCalc is Opcode calculator for Windows, Linux and MacOS.
PDBRipper is an utility for extract an information from PDB-files for Windows.
XNTSV is a program for detailed viewing of system structures for Windows.
XELFViewer is a ELF file viewer/editor for Windows, Linux and MacOS.
XPEViewer is a PE file viewer/editor for Windows, Linux and MacOS.
XMachOViewer is a MachO file viewer/editor for Windows, Linux and MacOS.
Nauz File Detector is a portable linker/compiler/packer identifier utility for Windows, Linux and MacOS.
x64dbg Plugin Manager for Windows.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent
