add: [pe] Added some PE fields as available with `lief` API

pull/425/head
Christian Studer 2024-04-02 21:21:38 +02:00
parent 1118a0492b
commit ad952beb60
No known key found for this signature in database
GPG Key ID: 6BBED1B63A6D639F
1 changed files with 31 additions and 1 deletions

View File

@ -5,6 +5,12 @@
"misp-attribute": "authentihash", "misp-attribute": "authentihash",
"ui-priority": 1 "ui-priority": 1
}, },
"characteristics": {
"description": "The characteristics that indicate the attributes of the file",
"disable_correlation": true,
"misp-attribute": "hex",
"ui-priority": 0
},
"company-name": { "company-name": {
"description": "CompanyName in the resources", "description": "CompanyName in the resources",
"disable_correlation": true, "disable_correlation": true,
@ -68,6 +74,18 @@
"misp-attribute": "text", "misp-attribute": "text",
"ui-priority": 0 "ui-priority": 0
}, },
"machine-type": {
"description": "Type of machine",
"disable_correlation": true,
"misp-attribute": "hex",
"ui-priority": 0
},
"number-of-symbols": {
"description": "Number of entries in the symbol table",
"disable_correlation": true,
"misp-attribute": "counter",
"ui-priority": 0
},
"number-sections": { "number-sections": {
"description": "Number of sections", "description": "Number of sections",
"disable_correlation": true, "disable_correlation": true,
@ -85,6 +103,12 @@
"misp-attribute": "pehash", "misp-attribute": "pehash",
"ui-priority": 0 "ui-priority": 0
}, },
"pointer-to-symbol-table": {
"description": "The file offset of the COFF symbol table.",
"disable_correlation": true,
"misp-attribute": "hex",
"ui-priority": 0
},
"product-name": { "product-name": {
"description": "ProductName in the resources", "description": "ProductName in the resources",
"disable_correlation": true, "disable_correlation": true,
@ -103,6 +127,12 @@
"multiple": true, "multiple": true,
"ui-priority": 0 "ui-priority": 0
}, },
"size-of-optional-header": {
"description": "Size of the optional header and the data directories which follow this header",
"disable_correlation": true,
"misp-attribute": "float",
"ui-priority": 0
},
"text": { "text": {
"description": "Free text value to attach to the PE", "description": "Free text value to attach to the PE",
"disable_correlation": true, "disable_correlation": true,
@ -136,5 +166,5 @@
"impfuzzy" "impfuzzy"
], ],
"uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07", "uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07",
"version": 7 "version": 8
} }