static-analysis-engineering / CodeHawk-Binary

CodeHawk Binary Analyzer for malware analysis and general reverse engineering
MIT License
21 stars 9 forks source link

Syntactic check: md5 comparison #140

Closed sipma closed 4 months ago

sipma commented 4 months ago

Add a raw listing of assembly function md5's to the app-comparison relational analysis for all assembly functions that were constructed, including those that were not analyzed.

By default only the functions that are analyzed are constructed (by the disassembler). To force all functions to be constructed, add the option --construct_all_functions to both the analyze command and the relational-prepare command.