assemblyline 4.5.0.dev8__tar.gz → 4.5.0.dev10__tar.gz

{assemblyline-4.5.0.dev8/assemblyline.egg-info → assemblyline-4.5.0.dev10}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.1
 Name: assemblyline
-Version: 4.5.0.dev8
+Version: 4.5.0.dev10
 Summary: Assemblyline 4 - Automated malware analysis framework
 Home-page: https://github.com/CybercentreCanada/assemblyline-base
 Author: CCCS Assemblyline development team
 Author-email: assemblyline@cyber.gc.ca
 License: MIT
 Keywords: assemblyline automated malware analysis gc canada cse-cst cse cst cyber cccs
+Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Topic :: Software Development :: Libraries
@@ -48,3 +49,5 @@ Here is an example on how you would get those libraries on a `Ubuntu 20.04+` sys
 
     sudo add-apt-repository ppa:deadsnakes/ppa
     sudo apt install libffi8 libfuzzy2 libmagic1 build-essential libffi-dev python3.11 python3.11-dev python3-pip libfuzzy-dev
+
+

assemblyline-4.5.0.dev10/assemblyline/VERSION

@@ -0,0 +1 @@
+4.5.0.dev10

{assemblyline-4.5.0.dev8 → assemblyline-4.5.0.dev10}/assemblyline/common/identify.py

@@ -322,10 +322,17 @@ class Identify():
 
         return fallback
 
-    def fileinfo(self, path: str, generate_hashes: bool = True, skip_fuzzy_hashes: bool = False) -> Dict:
+    def fileinfo(
+        self, path: str, generate_hashes: bool = True, skip_fuzzy_hashes: bool = False, calculate_entropy: bool = True
+    ) -> Dict:
         path = safe_str(path)
         if generate_hashes:
-            data = get_digests_for_file(path, on_first_block=self.ident, skip_fuzzy_hashes=skip_fuzzy_hashes)
+            data = get_digests_for_file(
+                path,
+                on_first_block=self.ident,
+                skip_fuzzy_hashes=skip_fuzzy_hashes,
+                calculate_entropy=calculate_entropy,
+            )
         else:
             with open(path, 'rb') as f:
                 first_block = f.read(DEFAULT_BLOCKSIZE)

{assemblyline-4.5.0.dev8 → assemblyline-4.5.0.dev10}/assemblyline/odm/models/tagging.py

@@ -269,7 +269,16 @@ class Tagging(odm.Model):
                 description = odm.Optional(odm.List(odm.Keyword(copyto="__text__")), description="Description")
                 filename = odm.Optional(odm.List(odm.Keyword(copyto="__text__")), description="Filename")
 
+            @odm.model(index=True, store=False, description="PE Authenticode Model")
+            class FilePEAuthenticode(odm.Model):
+                @odm.model(index=True, store=False, description="PE SpcSpOpusInfo Attribute Model")
+                class FilePEAuthenticodeSpcSpOpusInfo(odm.Model):
+                    program_name = odm.Optional(odm.List(odm.Keyword(copyto="__text__")), description="Program Name")
+
+                spc_sp_opus_info = odm.Optional(odm.Compound(FilePEAuthenticodeSpcSpOpusInfo), description="AAA")
+
             api_vector = odm.Optional(odm.List(odm.Keyword(copyto="__text__")), description="API Vector")
+            authenticode = odm.Optional(odm.Compound(FilePEAuthenticode), description="PE Authenticode Information")
             debug = odm.Optional(odm.Compound(FilePEDebug), description="PE Debug Information")
             exports = odm.Optional(odm.Compound(FilePEExports), description="PE Exports Information")
             imports = odm.Optional(odm.Compound(FilePEImports), description="PE Imports Information")

{assemblyline-4.5.0.dev8 → assemblyline-4.5.0.dev10/assemblyline.egg-info}/PKG-INFO

@@ -1,12 +1,13 @@
 Metadata-Version: 2.1
 Name: assemblyline
-Version: 4.5.0.dev8
+Version: 4.5.0.dev10
 Summary: Assemblyline 4 - Automated malware analysis framework
 Home-page: https://github.com/CybercentreCanada/assemblyline-base
 Author: CCCS Assemblyline development team
 Author-email: assemblyline@cyber.gc.ca
 License: MIT
 Keywords: assemblyline automated malware analysis gc canada cse-cst cse cst cyber cccs
+Platform: UNKNOWN
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: Intended Audience :: Developers
 Classifier: Topic :: Software Development :: Libraries
@@ -48,3 +49,5 @@ Here is an example on how you would get those libraries on a `Ubuntu 20.04+` sys
 
     sudo add-apt-repository ppa:deadsnakes/ppa
     sudo apt install libffi8 libfuzzy2 libmagic1 build-essential libffi-dev python3.11 python3.11-dev python3-pip libfuzzy-dev
+
+

assemblyline-4.5.0.dev8/assemblyline/VERSION

@@ -1 +0,0 @@
-4.5.0.dev8