BUGFIX
- Fixes in bearparser, including:
- Fixed error in mapping Raw Size to Virtual Size (when Virtual Size is smaller) - Issue: hasherezade/bearparser#20
- Fixed error in getting the last mapped address: exclude empty sections - Issue: hasherezade/bearparser#21
- Fixed an error in RVA/raw conversion in case of malformed (overlapping) Virtual Sections
- Recognize Thumb2 PE files
FEATURE
- Change interpretation of the TimeStamp field if the executable was build as reproducible
- Improved alerts about samples containing unusual features or malformations, including
- alert about .NET samples that may contain native code
- Better integration on Linux and other *nixes - desktop launcher, etc. #21
REFACT
- Code cleanup, replaced some deprecated Qt functions with new equivalents