{% load analysis_tags %}

Signatures

{% for signature in analysis.signatures %}
{{signature.description}} {% if signature.marks %} {% if signature.marks|length == 1 %} (1 event) {% elif signature.markcount == signature.marks|length %} ({{ signature.marks|length }} events) {% elif signature.markcount %} ({{ signature.marks|length }} out of {{ signature.markcount }} events) {% else %} ({{ signature.marks|length }} events) {% endif %} {% endif %}
{% for mark in signature.marks|sigsort %} {% if mark.type == "call" %} {% if mark.first %} {# Close up the non-API call table #} {% if not forloop.first %}
{% endif %} {% endif %} {% include "analysis/behavior/_api_call.html" with call=mark.call pid=mark.pid cid=mark.cid %} {% elif mark.type == "ioc" %} {% if mark.description %} {% endif %} {% elif mark.type == "generic" %} {% for key, value in mark.items %} {% if key != "type" %} {% endif %} {% endfor %} {% endif %} {% endfor %}
Time & API Arguments Status Return Repeated
{{ mark.category }} {{ mark.ioc }}{{ mark.description }}
{{ key }} {{ value }}
{% endfor %} {% if not analysis.signatures %}

No signatures

{% endif %}