horsicq / Detect-It-Easy

Program for determining types of files for Windows, Linux and MacOS.
http://ntinfo.biz
MIT License
7.3k stars 714 forks source link

Wrong detection #66

Closed Kebechet closed 2 years ago

Kebechet commented 4 years ago

I have found a detection problem in DIE v3.00. File: https://malshare.com/sample.php?action=detail&hash=51944b94d513b09e6c9d51202e3d4812

is detected as .NET but it is just packet with kkrunchy packer.

PS: It is malware, dont run it(static analysis should be fine).

horsicq commented 4 years ago

Thanks for the bugreport! It will be fixed.