Python get_apialert示例

示例#1

文件： peframe.py 项目： brifordwylie/peframe

def show_suspicious(filename):
	apialert = pecore.get_apialert(filename)
	if apialert:
		len_apialert = len(apialert)
		print "\nSuspicious API discovered [" + str(len_apialert) + "]"
		print "-"*60
		for i in range(0, len_apialert):
			print 'Function'.ljust(18), apialert[i]

示例#2

文件： peframe.py 项目： PROJECT-ARES/peframe

def show_suspicious(filename):
	apialert_list = []
	apialert      = pecore.get_apialert(filename)
	if apialert:
		len_apialert = len(apialert)
		for i in range(0, len_apialert):
			apialert_list.append(apialert[i])	
		return apialert_list

示例#3

def show_suspicious(filename):
    apialert = pecore.get_apialert(filename)
    file5 = open("/tmp/susApi.txt", "w")
    if apialert:
        len_apialert = len(apialert)

        file5.write("\nSuspicious API discovered [" + str(len_apialert) + "]")
        file5.write("-" * 60)
        for i in range(0, len_apialert):
            file5.write('Function'.ljust(18) + apialert[i])
        file5.close()

示例#4

文件： peframe.py 项目： CyberIntelMafia/malwareHunter

def show_suspicious(filename):
	apialert = pecore.get_apialert(filename)
        file5 = open("/tmp/susApi.txt", "w")
	if apialert:
		len_apialert = len(apialert)
                
                
		file5.write("\nSuspicious API discovered [" + str(len_apialert) + "]")
		file5.write("-"*60)
		for i in range(0, len_apialert):
			file5.write('Function'.ljust(18) + apialert[i])
                file5.close()

示例#5

文件： peframe.py 项目： doniexun/peframe

def autoanalysis(pe, filename, json=False):

    if json:
        print pecore.get_info(pe, filename), \
         pecore.get_cert(pe), \
         pecore.get_packer(pe), \
         pecore.get_antidbg(pe), \
         pecore.get_antivm(filename), \
         pecore.get_apialert(pe), \
         pecore.get_secalert(pe), \
         pecore.get_fileurl(filename), \
         pecore.get_meta(pe)

    else:
        stdoutput.show_auto(
         pecore.get_info(pe, filename), \
         pecore.get_cert(pe), \
         pecore.get_packer(pe), \
         pecore.get_antidbg(pe), \
         pecore.get_antivm(filename), \
         pecore.get_apialert(pe), \
         pecore.get_secalert(pe), \
         pecore.get_fileurl(filename), \
         pecore.get_meta(pe))

示例#6

文件： peframe.py 项目： PolymorhicCode/peframe

def autoanalysis(pe, filename, json=False):
	
	if json:
		print pecore.get_info(pe, filename), \
			pecore.get_cert(pe), \
			pecore.get_packer(pe), \
			pecore.get_antidbg(pe), \
			pecore.get_antivm(filename), \
			pecore.get_apialert(pe), \
			pecore.get_secalert(pe), \
			pecore.get_fileurl(filename), \
			pecore.get_meta(pe)

	else:
		stdoutput.show_auto(
			pecore.get_info(pe, filename), \
			pecore.get_cert(pe), \
			pecore.get_packer(pe), \
			pecore.get_antidbg(pe), \
			pecore.get_antivm(filename), \
			pecore.get_apialert(pe), \
			pecore.get_secalert(pe), \
			pecore.get_fileurl(filename), \
			pecore.get_meta(pe))