FLIRT Signature Bundle

FLIRT Signature Bundle

With FLIRT Signature Bundle, designed to be used with IDA Feeds (aka FLIRT Signature Manager), you can analyze thousands of signatures and bulk apply them to your binary.

The bundle contains signatures for modern languages like Golang and Rust, as well as updates for classic compilers. The latest version of the FLIRT Signature Bundle can be downloaded from My Hex-Rays portal under SDK and utilities.

FLIRT Signature Bundles will be regularly updated and released independently whenever there is a new compiler, language, or library release.

The signature updates happen automatically whenever the upstream program changes. This means your signatures stay up-to-date without manual intervention, ensuring you’re always working with the latest, most accurate information.

Released versions

FLIRT Signature Bundle 9.3

The packages are updated with the latest language and library versions across all supported platforms. This release brings a massive expansion of Rust coverage, a significant expansion of Linux C/C++ coverage, new Golang versions, and updated Windows CRT packages.

What's new since 9.0

Golang

Extended version range:

• Versions 1.24.8 through 1.26.0 (including 1.26.0-rc1/rc2/rc3) across all supported OS/architecture combinations.

Rust

Massively expanded version range:

• Versions 1.8.0 through 1.93.1 across all supported OS/architecture combinations and compilers (GCC, LLVM, MSVC).

C/C++ — Windows (MSVC)

Updated CRT packages:

VS16 and VS17 toolsets updated to 14.44.35222, covering Desktop, Desktop-Spectre, and Store variants for ARM64, arm, x64, and x86. Windows SDK updated to 10.0.26100.15.

C/C++ — Linux (Ubuntu & Debian)

Updated and expanded library versions:

The table below shows the library groups updated in this release. Each entry reflects new package versions added; the architectures covered remain i386, amd64, arm64, armhf, armel, s390x, ppc64el (and mips/mipsel where applicable).

Library	Notable new versions
libssl	3.0.19, 3.4.1, 3.5.5 (Ubuntu); 3.0.19, 3.5.5 (Debian)
libcurl4 (gnutls / openssl / nss)	7.81.0, 8.5.0, 8.14.1, 8.18.0, 8.19.0~rc (multiple backends)
libssh / libssh-gcrypt	0.9.6, 0.10.6, 0.11.1–0.11.3
libgnutls28	3.7.3–3.8.12 across Ubuntu and Debian
libprotobuf	3.12.4, 3.21.12, 3.25.7
libnghttp2	1.64.0, 1.68.0
uuid	2.39–2.42 series
libzstd	1.5.7
libtasn1-6	4.18–4.21
libgmp	6.3.0 (Ubuntu build variants)
libldap	2.5.20, 2.6.10
libpcre2 (Ubuntu only)	10.45, 10.46
libc6 (Ubuntu only)	2.35–2.42
zlib1g (Ubuntu only)	1.3.1
musl (Ubuntu only)	1.2.5
libidn2 (Ubuntu only)	2.3.8
SDL1/SDL2 bundles	libsdl2-image 2.8.8, libsdl2-ttf 2.24.0, libsdl2-mixer 2.8.1, and more

FLIRT Signature Bundle 9.1

The packages are updated with the latest language versions.

FLIRT Signature Bundle 9.0sp1

Since 9.0SP1, alongside standard bundles, we have released FLIRT Signature Bundles with metadata. The packages are updated with the latest language versions.

2024/09/12 FLIRT Signature Bundle 9.0

Packages

Golang

• Versions: stable versions from 1.10.0 to 1.23

• Operating Systems: Linux, Windows, MacOS

• Architectures: arm64 (Windows, Linux, MacOS), arm (Windows, Linux, MacOS), x86 (Windows, Linux) , x86-64 (Windows, Linux)

C/C++

• Windows (MSVC):

  • Architectures: arm, arm64, i386, amd64

  • Packages: ATL, CTL, MFC, Windows SDK 10, Windows SDK 11

• Linux:

  • Distribution: Ubuntu & Debian

  • Architectures: i386, amd64, arm64, armhf, armel, arm, s390x, mips64el, mipsel, mips, ppc64el

  • Packages: libc6, libselinux1, libpcre2, libidn2, libssl, zlib1g, lib32z1, libunistring, libcurl4-gnutls, libcurl4-nss, libcurl4-openssl, libnghttp2, libidn2, librtmp, libssh, libssh-gcrypt, libpsl, libldap, libzstd, libbrotli, libgnutls28, nettle, libgmp, comerr, libsasl2, libbrotli, libtasn1-6, libkeyutils, libffi, uuid, libprotobuf, heimdal-multidev, musl, libplib, libsdl1.2-bundle (libsdl-console, libsdl-sge, libsdl1.2, libsdl-ocaml, libsdl-image1.2, libsdl-kitchensink, libsdl-mixer1.2, libsdl-net1.2, libsdl-sound1.2, libsdl-ttf2.0, libsdl1.2-compat, libsdl-gfx1.2, libsdl-pango), libsdl2-bundle (libsdl2, libsdl2-gfx, libsdl2-image, libsdl2-mixer, libsdl2-net, libsdl2-ttf)

Rust

• Versions 1.77 to 1.81

  • Architectures: arm64, arm, x86, x86-64

  • Operating Systems: Linux, Windows, MacOS

  • Compilers: GCC, LLVM, MSVC