Example #1
0
def extract_feature(f):
    oid = oxide.import_file(f)[0]
    if not oid:
        print " - Not able to import the file %s" % f
        return None

    print " - Processing %s %s" % (f, oid)
    delays = oxide.get_field("pe_parse", oid, "delay_import_table")
    return delays
def extract_ordinal(f):
    oid = oxide.import_file(f)[0]
    if not oid:
        print " - Not able to import the file %s" % f
        return None

    print " - Processing %s %s" % (f, oid)
    exports = oxide.get_field("pe_parse", oid, "exports_table")
    if not exports:
        print "    ... No exports, skipping"
        return None

    file_data = oxide.get_field("files", oid, "data")
    ordinals = {}

    for name in exports["export_names"]:
        ordinals[exports["export_names"][name]['ord']] = name

    return ordinals