Skip to content

Commit 1e14201

Browse files
committed
chg: Update objects to match lief output for authenticode
1 parent fd7c05d commit 1e14201

2 files changed

Lines changed: 28 additions & 4 deletions

File tree

objects/authenticode-signerinfo/definition.json

Lines changed: 22 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,8 +5,20 @@
55
"misp-attribute": "text",
66
"ui-priority": 0
77
},
8+
"digest-base64": {
9+
"description": "Signature created by the signing certificate’s private key",
10+
"disable_correlation": true,
11+
"misp-attribute": "text",
12+
"ui-priority": 0
13+
},
814
"digest_algorithm": {
9-
"description": "Digest algorithm",
15+
"description": "Algorithm used to hash the file.",
16+
"disable_correlation": true,
17+
"misp-attribute": "text",
18+
"ui-priority": 0
19+
},
20+
"encryption_algorithm": {
21+
"description": "Algorithm used to encrypt the digest",
1022
"disable_correlation": true,
1123
"misp-attribute": "text",
1224
"ui-priority": 0
@@ -22,6 +34,12 @@
2234
"misp-attribute": "text",
2335
"ui-priority": 0
2436
},
37+
"serial-number": {
38+
"description": "Serial number of the certificate",
39+
"disable_correlation": true,
40+
"misp-attribute": "text",
41+
"ui-priority": 0
42+
},
2543
"signature_algorithm": {
2644
"description": "Signature algorithm",
2745
"disable_correlation": true,
@@ -55,8 +73,9 @@
5573
"name": "authenticode-signerinfo",
5674
"requiredOneOf": [
5775
"url",
58-
"program-name"
76+
"program-name",
77+
"issuer"
5978
],
6079
"uuid": "965cb0aa-baf1-4cc6-9070-68f5c1698c1e",
61-
"version": 1
80+
"version": 2
6281
}

objects/pe/definition.json

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,10 @@
11
{
22
"attributes": {
3+
"authentihash": {
4+
"description": "Authenticode executable signature hash (sha256)",
5+
"misp-attribute": "authentihash",
6+
"ui-priority": 1
7+
},
38
"company-name": {
49
"description": "CompanyName in the resources",
510
"disable_correlation": true,
@@ -131,5 +136,5 @@
131136
"impfuzzy"
132137
],
133138
"uuid": "cf7adecc-d4f0-4e88-9d90-f978ee151a07",
134-
"version": 6
139+
"version": 7
135140
}

0 commit comments

Comments
 (0)