mirror of
https://github.com/mandiant/capa.git
synced 2026-01-05 09:17:47 -08:00
Update tests/test_rules.py
Co-authored-by: Moritz <mr-tz@users.noreply.github.com>
This commit is contained in:
@@ -1022,9 +1022,9 @@ def test_translate_com_features():
|
||||
com_name = "WICPngDecoder"
|
||||
com_features = [
|
||||
capa.features.common.Bytes(b"{\xa1\x9e8xP\xdeL\xb6\xef%\xc1Qu\xc7Q", f"CLSID_{com_name} as bytes"),
|
||||
capa.features.common.StringFactory("389ea17b-5078-4cde-b6ef-25c15175c751", f"CLSID_{com_name} as guid string"),
|
||||
capa.features.common.StringFactory("389ea17b-5078-4cde-b6ef-25c15175c751", f"CLSID_{com_name} as GUID string"),
|
||||
capa.features.common.Bytes(b"[\x94\x18\xe0\x86\xaa\x08@\x9b\xd4gw\xa1\xe4\x0c\x11", f"IID_{com_name} as bytes"),
|
||||
capa.features.common.StringFactory("e018945b-aa86-4008-9bd4-6777a1e40c11", f"IID_{com_name} as guid string"),
|
||||
capa.features.common.StringFactory("e018945b-aa86-4008-9bd4-6777a1e40c11", f"IID_{com_name} as GUID string"),
|
||||
]
|
||||
for child in r.statement.get_children():
|
||||
assert child in com_features
|
||||
|
||||
Reference in New Issue
Block a user