Skip to main content

detect_structural_anomalies

Function detect_structural_anomalies 

Source
pub fn detect_structural_anomalies(pe: &PeFile) -> Vec<PeAnomaly>
Expand description

Compute structural anomalies from a fully-parsed PeFile.

Returns one PeAnomaly per anomaly found. An empty Vec means the binary looks structurally normal (not necessarily benign).