MISP
/
PyMISP
mirror of https://github.com/MISP/PyMISP
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: Add authenticode support in generate_file_objects

pull/694/head
Raphaël Vinot 2021-01-19 16:18:28 +01:00
parent d81639b0ba
commit ea643ec15e
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
examples/generate_file_objects.py
View File

@ -43,6 +43,15 @@ def make_objects(path):
to_return['references'] += s.ObjectReference to_return['references'] += s.ObjectReference
if peo: if peo:
if hasattr(peo, 'certificates') and hasattr(peo, 'signers'):
# special authenticode case for PE objects
for c in peo.certificates:
to_return['objects'].append(c)
for s in peo.signers:
to_return['objects'].append(s)
del peo.certificates
del peo.signers
del peo.sections
to_return['objects'].append(peo) to_return['objects'].append(peo)
if peo.ObjectReference: if peo.ObjectReference:
to_return['references'] += peo.ObjectReference to_return['references'] += peo.ObjectReference