PortEx

Changelog:

• RE hints added for various packers and wrappers
• delay load entries can also be read as RVAs
• bound imports can also be read as RVAs
• PEData exposes various convenience functions
• version upgrades for packages
• namespace change
• extended dll characteristics
• more sections recognized by SectionTableScanner
• .NET parsing
• pinvokes can be retrieved
• pinvokes rec...

Additions:

• timedatestamps added to ImportDLLs and import report
• repro debug info added, repro hash extraction
• reproducibility build checks for timestamps

Bugfixes:

• misaligned values in RichHeader caused crash
• added missing DLLCharacteristics (did these change in the last years?)
• visualizer legend not showing special sections in certain circumstances

Changes:

• .NET metadata parsing (ALPHA - currently some features are missing causing wrong output)
• Rich Header parsing, hashes and checksum verification added
• Chi squared added
• corrections for low alignment files
• linker version descriptions added
• convenience functions in PEData that perform common tasks: loading resources, pdb path, imports, exports, icon, version info, manifest...

Mitigation of https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-45046

• log4j2 update to mitigate CVE-2021-44228
• PortexAnalyzer update to 0.9.2
• RichHeader parsing added
• Chi2 added
• more section names descriptions
• ImpHash added