Download
IDA Pro plug-in conversion of Luigi Auriemma's signsrch signature matching tool.
* Deprecated, will no longer be updated, please see my use my superior YARA for IDA plugin here:
https://github.com/kweatherman/yara4ida
* July 2018, updated to IDA 7.1
Luigi's original signsrch description:
"Tool for searching signatures inside files, extremely useful as help in
reversing jobs like figuring or having an initial idea of what encryption/-
compression algorithm is used for a proprietary protocol or file.
It can recognize tons of compression, multimedia and encryption algorithms and
many other things like known strings and anti-debugging code which can be also
manually added since it's all based on a text signature file read at run-time
and easy to modify."
Project Samples
