mandiant / mandiant/capa

binja: embedded pe: offsets are virtual addresses rather than file offsets

Open
#2,748 3 comments 0 reactions 0 assignees View on GitHub
binary-ninja bug
Dominant language
Python
Stars
6.2k
Forks
726
Avg merge
11d 11h
Merged PRs (30d)
7

Description

#2745 for Binary Ninja

Contributor guide

Open the contributing guide

Research direction

Start by reading the related issue #2745 and tracing the Binary Ninja embedded-PE handling it identifies. Locate where embedded PE offsets are interpreted, then verify the behavior against virtual addresses and file offsets; done means the reported offsets use the correct coordinate system and the relevant checks pass.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.