refactor: replace section SizeOfRawData with Misc_VirtualSize

This commit is contained in:
Dobin
2024-02-18 14:04:57 +00:00
parent 224d252e78
commit 00f0d8d388
3 changed files with 10 additions and 9 deletions
+1 -1
View File
@@ -162,7 +162,7 @@ class PeBackdoor:
entrypoint = self.pe.OPTIONAL_HEADER.AddressOfEntryPoint
for sect in self.pe.sections:
if sect.Characteristics & pefile.SECTION_CHARACTERISTICS['IMAGE_SCN_MEM_EXECUTE']:
if entrypoint >= sect.VirtualAddress and entrypoint <= sect.VirtualAddress + sect.SizeOfRawData:
if entrypoint >= sect.VirtualAddress and entrypoint <= sect.VirtualAddress + sect.Misc_VirtualSize:
return sect
return None