Check discarding some resources

[Lifka]

Hi,

the following check causes less resources to be obtained:

PeNet/src/PeNet/HeaderParser/Pe/ImageResourceDirectoryParser.cs

Lines 40 to 42 in 05133c9

	// This check only applies to the second level.
	if (de!.IsIdEntry && de.NameResolved == "unknown")
	continue;

For example, for the sample aafee478d8d65eea241b1f01c0af10fa2181f7301776438d2b7a2f146f9dfc5a PeNet gets only 30 resources, while other tools like pestudio, VirusTotal or Resource Hacker get 37.

Is there a good reason to discard these resources?

[secana]

Hi @Lifka, sry I don't have access to that specific file to check what's going on. Could you share it with me?

[Lifka]

Sure! Sorry, this is the sample --> https://mega.nz/file/A1MB1BQZ#X2lY4cvLhr8kz0XhgFhU0VkXRKBt66xthXUThf036X4 (aafee478d8d65eea241b1f01c0af10fa2181f7301776438d2b7a2f146f9dfc5a).

Be careful! Do not execute, it's a malware. Zip password: infected