CodeType is intended to provide a way of characterizing segments of
malicious code that is extracted or otherwise retrieved from malware.The
codetype attribute is intended to provide a way of specifying the type of
code being characterized. Possible values: Exploit_Code, Shellcode,
Unknown, Other.The language attribute refers to the programming language
used in the code characterized in this element. Possible values are: C,
C++, C#, Java, JSP, Javascript, ASP.NET, SQL, Python, Perl, PHP, SOAP,
Ruby, Shell, Pseudocode, .NET, Assembly, XML, HTML.If the code was
discovered inside a binary, the start_address attribute can be used to
reference the its start address.The processor_family attribute is
intended to specify the class of processor that the code snippet is
targeting. Possible values: x86-32, x86-64, IA-64, PowerPC, ARM, Alpha,
SPARC, z/Architecture, eSi-RISC, MIPS, Motorola 68k, Other.The xorpattern
attribute contains a 16 -hexadecimal-character hex string, which
represents the pattern that the Code_Segment element should be XORed with
in order to recover the actual code. The default value is
55AA55AA55AA55BB, as specified by IETF RFC 5901.
|
__init__(self,
language=None,
processor_family=None,
start_address=None,
codetype=None,
xorpattern=' 55AA55AA55AA55BB ' ,
id=None,
Discovery_Method=None,
Code_Segment=None,
Code_Segment_XOR=None,
External_File=None)
x.__init__(...) initializes x; see help(type(x)) for signature |
source code
|
|
|
|
|
set_Discovery_Method(self,
Discovery_Method) |
source code
|
|
|
|
|
|
|
|
|
set_Code_Segment_XOR(self,
Code_Segment_XOR) |
source code
|
|
|
|
|
|
|
|
|
|
|
|
|
set_processor_family(self,
processor_family) |
source code
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
export(self,
outfile,
level,
namespace_=' maec: ' ,
name_=' CodeType ' ,
namespacedef_='
' ) |
source code
|
|
|
exportAttributes(self,
outfile,
level,
already_processed,
namespace_=' maec: ' ,
name_=' CodeType ' ) |
source code
|
|
|
exportChildren(self,
outfile,
level,
namespace_=' maec: ' ,
name_=' CodeType ' ,
fromsubclass_=False) |
source code
|
|
|
|
|
exportLiteral(self,
outfile,
level,
name_=' CodeType ' ) |
source code
|
|
|
exportLiteralAttributes(self,
outfile,
level,
already_processed,
name_) |
source code
|
|
|
exportLiteralChildren(self,
outfile,
level,
name_) |
source code
|
|
|
|
|
buildAttributes(self,
node,
attrs,
already_processed) |
source code
|
|
|
buildChildren(self,
child_,
node,
nodeName_,
fromsubclass_=False) |
source code
|
|
Inherited from GeneratedsSuper :
gds_build_any ,
gds_format_boolean ,
gds_format_boolean_list ,
gds_format_double ,
gds_format_double_list ,
gds_format_float ,
gds_format_float_list ,
gds_format_integer ,
gds_format_integer_list ,
gds_format_string ,
gds_str_lower ,
gds_validate_boolean ,
gds_validate_boolean_list ,
gds_validate_double ,
gds_validate_double_list ,
gds_validate_float ,
gds_validate_float_list ,
gds_validate_integer ,
gds_validate_integer_list ,
gds_validate_string ,
get_class_obj_ ,
get_path_ ,
get_path_list_
Inherited from object :
__delattr__ ,
__format__ ,
__getattribute__ ,
__hash__ ,
__new__ ,
__reduce__ ,
__reduce_ex__ ,
__repr__ ,
__setattr__ ,
__sizeof__ ,
__str__ ,
__subclasshook__
|