{ "name": "pe", "uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07", "meta-category": "file", "description": "Object describing a Portable Executable", "version": 1, "attributes": { "imphash": { "misp-attribute": "imphash", "misp-usage-frequency": 0 }, "pehash": { "misp-attribute": "pehash", "misp-usage-frequency": 0 }, "impfuzzy": { "misp-attribute": "impfuzzy", "misp-usage-frequency": 0 }, "type": { "misp-attribute": "text", "misp-usage-frequency": 1, "disable_correlation": true, "sane_default": [ "exe", "dll", "driver", "unknown" ] }, "text": { "misp-attribute": "text", "misp-usage-frequency": 1, "disable_correlation": true }, "number-sections": { "misp-attribute": "counter", "misp-usage-frequency": 0, "disable_correlation": true }, "original-filename": { "misp-attribute": "filename", "misp-usage-frequency": 1 }, "internal-filename": { "misp-attribute": "filename", "misp-usage-frequency": 0 }, "compilation-timestamp": { "misp-attribute": "datetime", "misp-usage-frequency": 1 }, "entrypoint-section|position": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "entrypoint-address": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "file-description": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "file-version": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "lang-id": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "product-name": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "product-version": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "company-name": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "legal-copyright": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true }, "pe-type": { "misp-attribute": "text", "misp-usage-frequency": 0, "disable_correlation": true } }, "requiredOneOf": [ "text", "original-filename", "internal-filename" ] }