Data

Tools

Indexes

Applications

Experiments

Open Source Science

https://github.com/ffri/pypeid

Yet another implementation of PEiD with yara-python

https://github.com/ffri/pypeid

Science Score: 26.0%

This score indicates how likely this project is to be science-related based on various indicators:

  • ○
    CITATION.cff file
  • ✓
    codemeta.json file
    Found codemeta.json file
  • ✓
    .zenodo.json file
    Found .zenodo.json file
  • ○
    DOI references
  • ○
    Academic publication links
  • ○
    Academic email domains
  • ○
    Institutional organization owner
  • ○
    JOSS paper metadata
  • ○
    Scientific vocabulary similarity
    Low similarity (4.1%) to scientific vocabulary
Last synced: 6 months ago · JSON representation

Repository

Yet another implementation of PEiD with yara-python

Basic Info
  • Host: GitHub
  • Owner: FFRI
  • License: apache-2.0
  • Language: Python
  • Default Branch: master
  • Size: 105 KB
Statistics
  • Stars: 6
  • Watchers: 2
  • Forks: 2
  • Open Issues: 2
  • Releases: 3
Created almost 6 years ago · Last pushed almost 2 years ago
Metadata Files
Readme License

README.md

pypeid

Checked with mypy

Yet another implementation of PEiD with yara-python

Requirements

  • Python 3.12
  • Poetry 1.7+

Install

``` $ git clone --recursive https://github.com/FFRI/pypeid.git $ cd pypeid $ poetry shell $ poetry install --no-root $ poetry build $ pip install dist/pypeid-0.1.3-py3-none-any.whl $ python

from pypeid import PEiDScanner scanner = PEiDScanner() scanner.scanfile("/mnt/c/Windows/System32/notepad.exe") {'PE': '64 bit', 'DLL': 'no', 'Packed': 'no', 'Anti-Debug': 'no', 'GUI Program': 'yes', 'Console Program': 'no', 'mutex': 'yes', 'contains base64': 'yes', 'PEiD': ['MicrosoftVisualCpp80_DLL'], 'AntiDebug': []} ```

Run unit test

``` $ poetry run pytest ==================================================================================== test session starts ==================================================================================== platform linux -- Python 3.12.2, pytest-8.1.1, pluggy-1.4.0 rootdir: /home/ffri/pypeid configfile: pyproject.toml collected 3 items

tests/test_scanner.py ... [100%]

===================================================================================== 3 passed in 1.16s ===================================================================================== ```

Tested platform

  • Ubuntu 22.04 on WSL2 & Python 3.12.2

Author

Koh M. Nakagawa. © FFRI Security, Inc. 2020-2024

Owner

  • Name: FFRI Security, Inc.
  • Login: FFRI
  • Kind: organization
  • Location: Tokyo, Japan

Next Generation Security

GitHub Events

Total
Last Year

Issues and Pull Requests

Last synced: about 1 year ago

All Time
  • Total issues: 2
  • Total pull requests: 0
  • Average time to close issues: N/A
  • Average time to close pull requests: N/A
  • Total issue authors: 2
  • Total pull request authors: 0
  • Average comments per issue: 1.0
  • Average comments per pull request: 0
  • Merged pull requests: 0
  • Bot issues: 0
  • Bot pull requests: 0
Past Year
  • Issues: 0
  • Pull requests: 0
  • Average time to close issues: N/A
  • Average time to close pull requests: N/A
  • Issue authors: 0
  • Pull request authors: 0
  • Average comments per issue: 0
  • Average comments per pull request: 0
  • Merged pull requests: 0
  • Bot issues: 0
  • Bot pull requests: 0
View more stats
Top Authors
Issue Authors
  • july0426 (1)
  • evandrix (1)
Pull Request Authors
Top Labels
Issue Labels
Pull Request Labels

Dependencies

poetry.lock pypi
  • attrs 22.2.0 develop
  • black 23.1.0 develop
  • certifi 2022.12.7 develop
  • charset-normalizer 3.1.0 develop
  • click 8.1.3 develop
  • colorama 0.4.6 develop
  • idna 3.4 develop
  • iniconfig 2.0.0 develop
  • isort 5.12.0 develop
  • mypy 1.1.1 develop
  • mypy-extensions 1.0.0 develop
  • packaging 23.0 develop
  • pathspec 0.11.1 develop
  • platformdirs 3.2.0 develop
  • pluggy 1.0.0 develop
  • pytest 7.2.2 develop
  • requests 2.28.2 develop
  • typing-extensions 4.5.0 develop
  • urllib3 1.26.15 develop
  • yara-python 4.3.0
pyproject.toml pypi
  • python ^3.11
  • yara-python ^4.3.0