Updated authenticode parser to latest version (2024-03-02)

VirusTotal / yara

The pattern matching swiss knife

https://virustotal.github.io/yara/

BSD 3-Clause "New" or "Revised" License

7.93k stars 1.42k forks source link

Updated authenticode parser to latest version (2024-03-02) #2049

Closed metthal closed 4 months ago

metthal commented 4 months ago

Upon fixing the latest issue regarding parsing CMS, we figured out we are not properly extracting all certificates from Microsoft countersignatures. This should now properly expose them.

Also fixes one memory leak for countersignature parsing.