malwarebazaar 0.2.4__tar.gz → 0.2.6__tar.gz

{malwarebazaar-0.2.4 → malwarebazaar-0.2.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: malwarebazaar
-Version: 0.2.4
+Version: 0.2.6
 Summary: CLI wrapper for malware bazaar API (bazaar.abuse.ch) and YARAify API (yaraify.abuse.ch)
 Home-page: https://github.com/3c7/bazaar
 License: MIT
@@ -14,6 +14,7 @@ Classifier: Programming Language :: Python :: 3.8
 Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3 :: Only
 Classifier: Topic :: Security
 Provides-Extra: cli

malwarebazaar-0.2.6/malwarebazaar/__init__.py

@@ -0,0 +1,4 @@
+from importlib.metadata import version
+from malwarebazaar.api import Bazaar, Yaraify  # noqa
+
+version = f"v{version('malwarebazaar')}"

malwarebazaar-0.2.6/malwarebazaar/models.py

@@ -0,0 +1,112 @@
+from datetime import datetime
+from typing import List, Optional, Dict, Any
+
+from pydantic import BaseModel, validator
+
+
+class Sample(BaseModel):
+    """Just a simple dictionary wrapper."""
+    md5_hash: str
+    sha1_hash: str
+    sha256_hash: str
+    sha3_384_hash: Optional[str] = None
+    first_seen: Optional[datetime] = None
+    last_seen: Optional[datetime] = None
+    file_name: Optional[str] = None
+    file_size: int
+    file_type_mime: Optional[str] = None
+    file_type: Optional[str] = None
+    signature: Optional[str] = None
+    tags: Optional[List[str]] = None
+    imphash: Optional[str] = None
+    gimphash: Optional[str] = None
+    dhash_icon: Optional[str] = None
+    reporter: Optional[str] = None
+    telfhash: Optional[str] = None
+    tlsh: Optional[str] = None
+    origin_country: Optional[str] = None
+    anonymous: Optional[bool] = None
+    ssdeep: Optional[str] = None
+    sightings: Optional[int] = None
+    vendor_intel: Optional[Dict[Any, Any]] = None
+
+    def __init__(self, **data):
+        tasks = None
+        if "metadata" in data:
+            tasks = data["tasks"]
+            data = data["metadata"]
+        super().__init__(
+            sha3_384_hash=data.pop("sha3_384", None) or data.pop("sha3_384_hash", None),
+            **data
+        )
+
+    @validator("first_seen", pre=True)
+    def validate_fs(cls, value):
+        if not value:
+            return value
+        try:
+            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S")
+        except ValueError:
+            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S UTC")
+
+    @validator("last_seen", pre=True)
+    def validate_ls(cls, value):
+        if not value:
+            return value
+        try:
+            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S")
+        except ValueError:
+            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S UTC")
+
+
+class YaraRule(BaseModel):
+    time_stamp: Optional[datetime] = None
+    rule_name: Optional[str] = None
+    author: Optional[str] = None
+    description: Optional[str] = None
+    date: Optional[str] = None
+    tlp: Optional[str] = None
+    reference: Optional[str] = None
+    yarahub_uuid: Optional[str] = None
+    yarahub_license: Optional[str] = None
+    yarahub_author_twitter: Optional[str] = None
+    yarahub_reference_link: Optional[str] = None
+    yarahub_reference_md5: Optional[str] = None
+    yarahub_rule_matching_tlp: Optional[str] = None
+    yarahub_rule_sharing_tlp: Optional[str] = None
+    malpedia_family: Optional[str] = None
+
+    @validator("time_stamp", pre=True)
+    def validate_ts(cls, value):
+        if not value:
+            return value
+        try:
+            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S")
+        except ValueError:
+            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S UTC")
+
+
+class UnpackResult(BaseModel):
+    unpacked_file_name: Optional[str] = None
+    unpacked_md5: Optional[str] = None
+    unpacked_sha256: Optional[str] = None
+    unpacked_yara_matches: Optional[List[YaraRule]] = None
+
+
+class Task(BaseModel):
+    task_id: Optional[str] = None
+    clamav_scan: Optional[bool] = None
+    unpack: Optional[bool] = None
+    share_file: Optional[bool] = None
+    metadata: Optional[Sample] = None
+    static_results: Optional[List[YaraRule]] = None
+    clamav_results: Optional[List[str]] = None
+    unpacked_results: Optional[List[UnpackResult]] = None
+
+    def __init__(self, **data):
+        params = data.pop("task_parameters", {})
+        unpacked_results = data.pop("unpacked_results", [])
+        if len(unpacked_results) == 0:
+            unpacked_results = data.pop("unpack_results", [])
+
+        super().__init__(**data, **params, unpacked_results=unpacked_results)

{malwarebazaar-0.2.4 → malwarebazaar-0.2.6}/pyproject.toml

@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "malwarebazaar"
-version = "0.2.4"
+version = "0.2.6"
 description = "CLI wrapper for malware bazaar API (bazaar.abuse.ch) and YARAify API (yaraify.abuse.ch)"
 authors = ["3c7 <3c7@posteo.de>"]
 license = "MIT"

malwarebazaar-0.2.4/malwarebazaar/__init__.py

@@ -1,3 +0,0 @@
-from malwarebazaar.api import Bazaar, Yaraify
-
-version = "v0.2.0"

malwarebazaar-0.2.4/malwarebazaar/models.py

@@ -1,112 +0,0 @@
-from datetime import datetime
-from typing import List, Optional, Dict, Any
-
-from pydantic import BaseModel, validator
-
-
-class Sample(BaseModel):
-    """Just a simple dictionary wrapper."""
-    md5_hash: str
-    sha1_hash: str
-    sha256_hash: str
-    sha3_384_hash: Optional[str]
-    first_seen: Optional[datetime]
-    last_seen: Optional[datetime]
-    file_name: Optional[str]
-    file_size: int
-    file_type_mime: Optional[str]
-    file_type: Optional[str]
-    signature: Optional[str]
-    tags: Optional[List[str]]
-    imphash: Optional[str]
-    gimphash: Optional[str]
-    dhash_icon: Optional[str]
-    reporter: Optional[str]
-    telfhash: Optional[str]
-    tlsh: Optional[str]
-    origin_country: Optional[str]
-    anonymous: Optional[bool]
-    ssdeep: Optional[str]
-    sightings: Optional[int]
-    vendor_intel: Optional[Dict[Any, Any]]
-
-    def __init__(self, **data):
-        tasks = None
-        if "metadata" in data:
-            tasks = data["tasks"]
-            data = data["metadata"]
-        super().__init__(
-            sha3_384_hash=data.pop("sha3_384", None) or data.pop("sha3_384_hash", None),
-            **data
-        )
-
-    @validator("first_seen", pre=True)
-    def validate_fs(cls, value):
-        if not value:
-            return value
-        try:
-            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S")
-        except ValueError:
-            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S UTC")
-
-    @validator("last_seen", pre=True)
-    def validate_ls(cls, value):
-        if not value:
-            return value
-        try:
-            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S")
-        except ValueError:
-            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S UTC")
-
-
-class YaraRule(BaseModel):
-    time_stamp: Optional[datetime]
-    rule_name: Optional[str]
-    author: Optional[str]
-    description: Optional[str]
-    date: Optional[str]
-    tlp: Optional[str]
-    reference: Optional[str]
-    yarahub_uuid: Optional[str]
-    yarahub_license: Optional[str]
-    yarahub_author_twitter: Optional[str]
-    yarahub_reference_link: Optional[str]
-    yarahub_reference_md5: Optional[str]
-    yarahub_rule_matching_tlp: Optional[str]
-    yarahub_rule_sharing_tlp: Optional[str]
-    malpedia_family: Optional[str]
-
-    @validator("time_stamp", pre=True)
-    def validate_ts(cls, value):
-        if not value:
-            return value
-        try:
-            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S")
-        except ValueError:
-            return datetime.strptime(value, "%Y-%m-%d %H:%M:%S UTC")
-
-
-class UnpackResult(BaseModel):
-    unpacked_file_name: Optional[str]
-    unpacked_md5: Optional[str]
-    unpacked_sha256: Optional[str]
-    unpacked_yara_matches: Optional[List[YaraRule]]
-
-
-class Task(BaseModel):
-    task_id: Optional[str]
-    clamav_scan: Optional[bool]
-    unpack: Optional[bool]
-    share_file: Optional[bool]
-    metadata: Optional[Sample]
-    static_results: Optional[List[YaraRule]]
-    clamav_results: Optional[List[str]]
-    unpacked_results: Optional[List[UnpackResult]]
-
-    def __init__(self, **data):
-        params = data.pop("task_parameters", {})
-        unpacked_results = data.pop("unpacked_results", [])
-        if len(unpacked_results) == 0:
-            unpacked_results = data.pop("unpack_results", [])
-
-        super().__init__(**data, **params, unpacked_results=unpacked_results)