Update antianalysis_tls.py

CAPESandbox · Oct 4, 2024 · f055eb0 · f055eb0
1 parent b1ccb9e
commit f055eb0
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/signatures/all/antianalysis_tls.py b/modules/signatures/all/antianalysis_tls.py
@@ -36,8 +36,8 @@ def run(self):
             pe = self.results["target"]["file"].get("pe", [])
             if pe:
                 for section in pe["sections"]:
-                    if section["name"].lower() == ".tls":
-                        self.data.append({"thread local storage": section})
+                    if section["name"].lower().startswith(".tls"):
+                        self.data.append({"section": section})
                         ret = True         
 
         return ret