gitea-mirror/capa
1
0
Fork 0
mirror of https://github.com/mandiant/capa.git synced 2025-12-22 23:26:21 -08:00
Code Issues Packages Projects Releases Wiki Activity

feature extractor: null: add get_base_address()

Browse Source 
closes #88
This commit is contained in:
William Ballenthin
2020-07-03 09:32:37 -06:00
parent 0f8267e970
commit 5317e1e11e
2 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
capa/features/extractors/__init__.py
View File

@@ -180,6 +180,7 @@ class NullFeatureExtractor(FeatureExtractor):
example:: example::
extractor = NullFeatureExtractor({ extractor = NullFeatureExtractor({
'base address: 0x401000,
'file features': [ 'file features': [
(0x402345, capa.features.Characteristic('embedded pe')), (0x402345, capa.features.Characteristic('embedded pe')),
], ],
@@ -214,6 +215,9 @@ class NullFeatureExtractor(FeatureExtractor):
super(NullFeatureExtractor, self).__init__() super(NullFeatureExtractor, self).__init__()
self.features = features self.features = features
def get_base_address(self):
return self.features["base address"]
def extract_file_features(self): def extract_file_features(self):
for p in self.features.get("file features", []): for p in self.features.get("file features", []):
va, feature = p va, feature = p

1
tests/test_freeze.py
View File

@@ -10,6 +10,7 @@ from fixtures import *
EXTRACTOR = capa.features.extractors.NullFeatureExtractor( EXTRACTOR = capa.features.extractors.NullFeatureExtractor(
{ {
"base address": 0x401000,
"file features": [(0x402345, capa.features.Characteristic("embedded pe")),], "file features": [(0x402345, capa.features.Characteristic("embedded pe")),],
"functions": { "functions": {
0x401000: { 0x401000: {