Skip to content

Commit 1d88f6e

Browse files
Fixed xor key screenshot, modified Scan IAT semantics
1 parent d50bfab commit 1d88f6e

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ When a new hash is identified by HashDB the hash and its associated string are a
3636
Once the plugin settings have been configured you can right-click on any constant in the IDA disassembly window and look up the constant as a hash. The right-click also provides a quick way to set the XOR value if needed.
3737

3838
<p align="center">
39-
<img width="380" src="/assets/HashDB-Xor_key.png?raw=true">
39+
<img width="380" src="/assets/HashDB-Xor_Key.png?raw=true">
4040
</p>
4141

4242
### Bulk Import
@@ -66,7 +66,7 @@ Instead of resolving API hashes individually (inline in code) some malware devel
6666
<img width="800" alt="IAT Scan" src="/assets/HashDB-IAT_Scan.gif?raw=true">
6767
</p>
6868

69-
Simply select the import hash block, right-click and choose `HashDB Scan IAT`. HashDB will attempt to resolve each individual DWORD in the selected range.
69+
Simply select the import hash block, right-click and choose `HashDB Scan IAT`. HashDB will attempt to resolve each individual integer type (`DWORD/QWORD`) in the selected range.
7070

7171
## Installing HashDB
7272
Before using the plugin you must install the python **requests** module in your IDA environment. The simplest way to do this is to use pip from a shell outside of IDA.

0 commit comments

Comments
 (0)