From 36ae20bf02e1643f2fb2a7426017b0821ababab3 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 17 Feb 2020 14:27:05 +0100
Subject: [PATCH] chg: [pe] imphash and impfuzzy can be as key attribute

---
 objects/pe/definition.json | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/objects/pe/definition.json b/objects/pe/definition.json
index 1188c48..5b0c0e4 100644
--- a/objects/pe/definition.json
+++ b/objects/pe/definition.json
@@ -4,7 +4,9 @@
     "type",
     "original-filename",
     "internal-filename",
-    "entrypoint-address"
+    "entrypoint-address",
+    "imphash",
+    "impfuzzy"
   ],
   "attributes": {
     "pehash": {
@@ -119,7 +121,7 @@
       "misp-attribute": "text"
     }
   },
-  "version": 4,
+  "version": 5,
   "description": "Object describing a Portable Executable",
   "meta-category": "file",
   "uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07",