This commit is contained in:
Willi Ballenthin
2023-07-06 17:50:34 +02:00
parent 47074fd129
commit 9441da4887
5 changed files with 6 additions and 6 deletions

View File

@@ -33,8 +33,8 @@ from elftools.common.exceptions import ELFError
import capa.perf import capa.perf
import capa.rules import capa.rules
import capa.engine import capa.engine
import capa.version
import capa.helpers import capa.helpers
import capa.version
import capa.render.json import capa.render.json
import capa.rules.cache import capa.rules.cache
import capa.render.default import capa.render.default

View File

@@ -2,7 +2,7 @@
import json import json
import collections import collections
from typing import Any, Dict, Set from typing import Any, Set, Dict
import capa.main import capa.main
import capa.rules import capa.rules

View File

@@ -6,7 +6,7 @@
# is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. # is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and limitations under the License. # See the License for the specific language governing permissions and limitations under the License.
import capa.features.address import capa.features.address
from capa.engine import And, Or, Not, Some, Range from capa.engine import Or, And, Not, Some, Range
from capa.features.insn import Number from capa.features.insn import Number
ADDR1 = capa.features.address.AbsoluteVirtualAddress(0x401001) ADDR1 = capa.features.address.AbsoluteVirtualAddress(0x401001)

View File

@@ -21,8 +21,8 @@ import capa.features.freeze
import capa.features.basicblock import capa.features.basicblock
import capa.features.extractors.null import capa.features.extractors.null
import capa.features.extractors.base_extractor import capa.features.extractors.base_extractor
from capa.features.extractors.base_extractor import FunctionHandle, BBHandle from capa.features.address import Address, AbsoluteVirtualAddress
from capa.features.address import AbsoluteVirtualAddress, Address from capa.features.extractors.base_extractor import BBHandle, FunctionHandle
EXTRACTOR = capa.features.extractors.null.NullFeatureExtractor( EXTRACTOR = capa.features.extractors.null.NullFeatureExtractor(
base_address=AbsoluteVirtualAddress(0x401000), base_address=AbsoluteVirtualAddress(0x401000),

View File

@@ -13,7 +13,7 @@ import capa.engine
import capa.features.insn import capa.features.insn
import capa.features.common import capa.features.common
from capa.rules import Scope from capa.rules import Scope
from capa.features.common import MatchedRule, String, OS, OS_ANY, OS_WINDOWS from capa.features.common import OS, OS_ANY, OS_WINDOWS, String, MatchedRule
def match(rules, features, va, scope=Scope.FUNCTION): def match(rules, features, va, scope=Scope.FUNCTION):