Commit Graph

17 Commits

Author SHA1 Message Date
Huoji's
95df007dbf Add README and improve import library parsing with exception handling
- Create initial README.md with project overview and motivation
- Add SEH-based exception handling in ExtractFeatures method for import library parsing
- Prevent potential access violations during PE import directory traversal
- Implement basic error logging for skipped files with access violations
2025-03-09 04:24:46 +08:00
Huoji's
f80ba5d748 Enhance entropy calculation with safety improvements in CalculateEntropy method
- Add size validation to prevent potential DoS attacks
- Implement a maximum file size limit of 2GB
- Add exception handling to prevent access violations
- Improve robustness of byte frequency calculation
- Add basic input validation for data and size parameters
2025-03-09 04:09:24 +08:00
Huoji's
f00b0b2037 Improve Rich Header detection with enhanced safety checks
- Add robust boundary and size validation for Rich header parsing
- Prevent potential buffer overread with controlled search area
- Implement additional checks to handle maliciously crafted PE files
- Limit Rich header search to a maximum reasonable size
- Ensure safe memory access during signature detection
2025-03-09 03:31:11 +08:00
Huoji's
4d1ccb16aa Implement Rich Header parsing for PE file analysis
- Added ParseRichHeader method to extract Rich header information from PE files
- Defined RichEntry and RichHeaderInfo structures to store Rich header details
- Implemented decoding of Rich header entries with checksum XOR technique
- Updated ml.h and ml.cpp to support Rich header parsing
- Improved error handling and logging in ProcessDirectory method
- Translated some log messages to English for consistency
2025-03-09 03:29:14 +08:00
Huoji's
2fed2d5bae Enhance PE file Rich header detection with null and boundary checks
- Added null pointer and boundary checks in ExtractFeatures method
- Prevent potential buffer overread when searching for Rich header signature
- Improve robustness of feature extraction for PE file analysis
2025-03-09 03:25:29 +08:00
Huoji's
defe59ffe8 update 2025-03-09 03:19:40 +08:00
Huoji's
1cea516cf7 Add machine learning feature extraction for PE files
- Implemented MachineLearning class with ExtractFeatures method
- Updated project files to include new machine learning source and header files
- Modified main executable to call feature extraction
- Updated VSCode settings to include additional C++ headers
- Commented out previous file dumping code in main function
2025-03-09 02:05:07 +08:00
Huoji's
d2ed7936df fix up 2025-03-09 00:06:37 +08:00
huoji
f7b0625bff 实现 SetUnhandledExceptionFilter API 模拟 2025-03-07 19:59:00 +08:00
huoji
c5a9c95575 fix up 2025-03-07 19:27:05 +08:00
Huoji's
8504a9c8f9 调不了了 终极大招了 2025-03-07 01:47:01 +08:00
huoji
3f022ddd01 111 2025-03-06 20:33:02 +08:00
huoji
ed5e7ae994 fix up 2025-03-06 20:08:12 +08:00
huoji
9a5ea0f919 1 2025-03-06 19:15:24 +08:00
huoji
2c18f7fd15 update 2025-03-06 18:39:01 +08:00
Huoji's
dbe2e6a92b fix 1 2025-03-06 04:28:34 +08:00
Huoji's
2ca572e225 添加项目文件。 2025-03-06 04:05:03 +08:00