Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

dynamic: vmray: add support for "array" function call parameters #2246

Open
mike-hunhoff opened this issue Jul 30, 2024 · 0 comments
Open

dynamic: vmray: add support for "array" function call parameters #2246

mike-hunhoff opened this issue Jul 30, 2024 · 0 comments
Labels
dynamic related to dynamic analysis flavor enhancement New feature or request vmray related to VMRay sandbox report analysis

Comments

@mike-hunhoff
Copy link
Collaborator

The "array" type roughly maps to series of bytes and integers. We must first determine if capa can emit features from arrays without polluting the matches.

e.g.

[...]
				<member name="IdentifierAuthority.Value" type="array" num_elements="6">
					<item type="unsigned_8bit" value="0x0"/>
					<item type="unsigned_8bit" value="0x0"/>
					<item type="unsigned_8bit" value="0x0"/>
					<item type="unsigned_8bit" value="0x0"/>
					<item type="unsigned_8bit" value="0x0"/>
					<item type="unsigned_8bit" value="0x5"/>
				</member>
[...]
@mike-hunhoff mike-hunhoff added enhancement New feature or request dynamic related to dynamic analysis flavor vmray related to VMRay sandbox report analysis labels Jul 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dynamic related to dynamic analysis flavor enhancement New feature or request vmray related to VMRay sandbox report analysis
Projects
None yet
Development

No branches or pull requests

1 participant