Package lib :: Package maec :: Module maec11 :: Class CodeType
[hide private]
[frames] | no frames]

Class CodeType

source code

     object --+    
              |    
GeneratedsSuper --+
                  |
                 CodeType

CodeType is intended to provide a way of characterizing segments of malicious code that is extracted or otherwise retrieved from malware.The codetype attribute is intended to provide a way of specifying the type of code being characterized. Possible values: Exploit_Code, Shellcode, Unknown, Other.The language attribute refers to the programming language used in the code characterized in this element. Possible values are: C, C++, C#, Java, JSP, Javascript, ASP.NET, SQL, Python, Perl, PHP, SOAP, Ruby, Shell, Pseudocode, .NET, Assembly, XML, HTML.If the code was discovered inside a binary, the start_address attribute can be used to reference the its start address.The processor_family attribute is intended to specify the class of processor that the code snippet is targeting. Possible values: x86-32, x86-64, IA-64, PowerPC, ARM, Alpha, SPARC, z/Architecture, eSi-RISC, MIPS, Motorola 68k, Other.The xorpattern attribute contains a 16 -hexadecimal-character hex string, which represents the pattern that the Code_Segment element should be XORed with in order to recover the actual code. The default value is 55AA55AA55AA55BB, as specified by IETF RFC 5901.

Instance Methods [hide private]
 
__init__(self, language=None, processor_family=None, start_address=None, codetype=None, xorpattern='55AA55AA55AA55BB', id=None, Discovery_Method=None, Code_Segment=None, Code_Segment_XOR=None, External_File=None)
x.__init__(...) initializes x; see help(type(x)) for signature
source code
 
get_Discovery_Method(self) source code
 
set_Discovery_Method(self, Discovery_Method) source code
 
get_Code_Segment(self) source code
 
set_Code_Segment(self, Code_Segment) source code
 
get_Code_Segment_XOR(self) source code
 
set_Code_Segment_XOR(self, Code_Segment_XOR) source code
 
get_External_File(self) source code
 
set_External_File(self, External_File) source code
 
get_language(self) source code
 
set_language(self, language) source code
 
get_processor_family(self) source code
 
set_processor_family(self, processor_family) source code
 
get_start_address(self) source code
 
set_start_address(self, start_address) source code
 
get_codetype(self) source code
 
set_codetype(self, codetype) source code
 
get_xorpattern(self) source code
 
set_xorpattern(self, xorpattern) source code
 
get_id(self) source code
 
set_id(self, id) source code
 
export(self, outfile, level, namespace_='maec:', name_='CodeType', namespacedef_='') source code
 
exportAttributes(self, outfile, level, already_processed, namespace_='maec:', name_='CodeType') source code
 
exportChildren(self, outfile, level, namespace_='maec:', name_='CodeType', fromsubclass_=False) source code
 
hasContent_(self) source code
 
exportLiteral(self, outfile, level, name_='CodeType') source code
 
exportLiteralAttributes(self, outfile, level, already_processed, name_) source code
 
exportLiteralChildren(self, outfile, level, name_) source code
 
build(self, node) source code
 
buildAttributes(self, node, attrs, already_processed) source code
 
buildChildren(self, child_, node, nodeName_, fromsubclass_=False) source code

Inherited from GeneratedsSuper: gds_build_any, gds_format_boolean, gds_format_boolean_list, gds_format_double, gds_format_double_list, gds_format_float, gds_format_float_list, gds_format_integer, gds_format_integer_list, gds_format_string, gds_str_lower, gds_validate_boolean, gds_validate_boolean_list, gds_validate_double, gds_validate_double_list, gds_validate_float, gds_validate_float_list, gds_validate_integer, gds_validate_integer_list, gds_validate_string, get_class_obj_, get_path_, get_path_list_

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Static Methods [hide private]
 
factory(*args_, **kwargs_) source code
Class Variables [hide private]
  subclass = None
hash(x)
  superclass = None
hash(x)

Inherited from GeneratedsSuper: Tag_strip_pattern_

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

__init__(self, language=None, processor_family=None, start_address=None, codetype=None, xorpattern='55AA55AA55AA55BB', id=None, Discovery_Method=None, Code_Segment=None, Code_Segment_XOR=None, External_File=None)
(Constructor)

source code 

x.__init__(...) initializes x; see help(type(x)) for signature

Overrides: object.__init__
(inherited documentation)