polymorf / findcrypt-yara

IDA pro plugin to find crypto constants (and more)
BSD 3-Clause "New" or "Revised" License
1.36k stars 243 forks source link

Add rule to detect SHA256 constants #18

Closed recvfrom closed 4 years ago

recvfrom commented 5 years ago

It'd be great to add a rule that detects SHA256 constants. From 41364427dee49bf544dcff61a6899b3b7e59852435e4107931e294079a42de7c:

image

I should be able to submit a PR next week, unless someone else beats me to it.