retdec-fileinfo: Files packed/modified by msi2exe are not recognised as such
- Dominant language
- C++
- Stars
- 8.6k
- Forks
- 1k
- PR merge metrics
- No merged PRs in 30d
Description
A binary tool called [msi2exe](https://www.imelfin.com/convert-msi-to-exe.html) converts, as name suggests, MSI installation files into an executable. Such files are not detected by either fileinfo-unpackerf or fileinfo itself.
Examples of samples modified with the aforementioned binary tool:
```
015C466E442589339B89F76F19E85411C1798D8A94EE063B8B8BFE7E4DD4A6C2
061C58C0E8B7212560F430A81A166C0038DAC811CB26C881D6718F2A54C66847
09FEC8FEE95B815FDF6317055538639C3AD3AC272398678ECAC3425146060BA8
19F186516E12A275AAE382174C3DB92C96B0B7CCEE9D214B372367760292852E
2FEE7CC9AD65F453555FA73DC40ED627086BE1FC94AF7D7EE9FF819A6A41C1E5
37B9A37B4126FE7643F2278D41EC29EF466B0AD9BDE47138485FEEF08E574FED
5999106FEE4C378E96068D8B50AED6CBD00F0CE6F155A208217EDC82397831DD
7140621980D104CC671B649C09B209995A2B9DEE091AB5167A2F0EDE2E1ACDCF
A34E8709E73B691519F23C2B563473EAD8D5178C95814AF749B85DE5E4F93DFE
BD439CB84819DC1B6CE2C8550127B3E932C504684130F31550DAF4129ECB94E3
```
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by examining how fileinfo-unpackerf and fileinfo classify the msi2exe-modified samples listed in the issue. Compare their behavior with the msi2exe description and verify that the listed sample hashes are recognised as packed or modified when the work is complete.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- cpp
- Domain
- reverse-engineering
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100