internal/limitation/file

(internal) autohotkey file limitation

rule:
  meta:
    name: (internal) autohotkey file limitation
    namespace: internal/limitation/file
    authors:
      - "@mr-tz"
    description: |
      This sample appears to be compiled with AutoHotkey.

      AutoHotkey is a free, open-source scripting language for Windows that allows users to easily create scripts.
      AutoHotkey was developed from AutoIT and the scripts may be similar.
      capa cannot handle AutoHotkey scripts. This means that the results will be misleading or incomplete.
      You may have to analyze the file manually, using a tool like the AutoIt decompiler MyAut2Exe.
    scopes:
      static: file
      dynamic: file
    examples:
      - 92D8EA10EA30E8B534334A1C9857A455
  features:
    - or:
      - match: compiler/autohotkey

last edited: 2023-11-24 10:34:28