Merge pull request hatching#11 from AvihayST/feature/fix-wrong-packge-js

Some PE's are classified as js
CERT-Polska · Jul 22, 2021 · e2502fa · e2502fa
2 parents a02d9e6 + 16969e2
commit e2502fa
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/sflock/ident.py b/sflock/ident.py
@@ -251,6 +251,9 @@ def powershell(f):
 
 
 def javascript(f):
+    if f.contents[:2] == b'MZ':
+        return None
+
     JS_STRS = [
         b"var ",
         b"function ",