FILE_PE_IMPHASH

Constant FILE_PE_IMPHASH 

Source
pub const FILE_PE_IMPHASH: &str = "file.pe.imphash";
Expand description

A hash of the imports in a PE file. An imphash – or import hash – can be used to fingerprint binaries even after recompilation or other code-level transformations have occurred, which would change more traditional hash values. Learn more at https://www.fireeye.com/blog/threat-research/2014/01/tracking-malware-import-hashing.html.

§Examples

  • 0c6803c4e922103c4dca5963aad36ddf