added ELGG & added Binary match to scanner
This commit is contained in:
5
scan.py
5
scan.py
@@ -243,6 +243,7 @@ scoring = {
|
||||
'EITEST': (65, u'Eitest'),
|
||||
'CRYPTO': (65, u'Cryptocurrency Miners'),
|
||||
'HTML_JS': (20, u'HTML & Javascript Malware'),
|
||||
'BINARY': (10, u'Binary File - Possible LRE or CryptoMiner'),
|
||||
}
|
||||
|
||||
|
||||
@@ -560,6 +561,10 @@ def is_hacked(filename):
|
||||
score.append(('HTML_JS', ''))
|
||||
previous_line = l
|
||||
|
||||
if 'PROT_EXEC|PROT_WRITE failed.' in l \
|
||||
or 'This file is packed with the UPX executable packer' in l:
|
||||
score.append(('BINARY', ''))
|
||||
|
||||
if line_num < 20:
|
||||
score.append(('FEW_LINES', '%i lines' % line_num))
|
||||
elif line_num < 100:
|
||||
|
||||
Reference in New Issue
Block a user