NAME

STIX::Observable::Extension::WindowsPEBinary - STIX Cyber-observable Object (SCO) - Raster Image File Extension

SYNOPSIS

use STIX::Observable::Extension::WindowsPEBinary;

my $windows_pe_binary_ext = STIX::Observable::Extension::WindowsPEBinary->new();

DESCRIPTION

The Windows PE Binary File extension specifies a default extension for capturing properties specific to Windows portable executable (PE) files.

METHODS

STIX::Observable::Extension::WindowsPEBinary inherits all methods from STIX::Object and implements the following new ones.

STIX::Observable::Extension::WindowsPEBinary->new(%properties)

Create a new instance of STIX::Observable::Extension::WindowsPEBinary.

$windows_pe_binary_ext->pe_type

Specifies the type of the PE binary (see WINDOWS_PEBINARY_TYPE in STIX::Common::OpenVocabulary).

$windows_pe_binary_ext->imphash

Specifies the special import hash, or 'imphash', calculated for the PE Binary based on its imported libraries and functions.

$windows_pe_binary_ext->machine_hex

Specifies the type of target machine.

$windows_pe_binary_ext->number_of_sections

Specifies the number of sections in the PE binary, as a non-negative integer.

$windows_pe_binary_ext->time_date_stamp

Specifies the time when the PE binary was created. The timestamp value MUST BE precise to the second.

$windows_pe_binary_ext->pointer_to_symbol_table_hex

Specifies the file offset of the COFF symbol table.

$windows_pe_binary_ext->number_of_symbols

Specifies the number of entries in the symbol table of the PE binary, as a non-negative integer.

$windows_pe_binary_ext->size_of_optional_header

Specifies the size of the optional header of the PE binary.

$windows_pe_binary_ext->characteristics_hex

Specifies the flags that indicate the file’s characteristics.

$windows_pe_binary_ext->file_header_hashes

Specifies any hashes that were computed for the file header (see STIX::Common::Hashes).

$windows_pe_binary_ext->optional_header

Specifies the PE optional header of the PE binary (see STIX::Observable::Type::WindowsPEOptionalHeader).

$windows_pe_binary_ext->sections

Specifies metadata about the sections in the PE file (see STIX::Observable::Type::WindowsPESection).

HELPERS

$windows_pe_binary_ext->TO_JSON

Helper for JSON encoders.

$windows_pe_binary_ext->to_hash

Return the object HASH.

$windows_pe_binary_ext->to_string

Encode the object in JSON.

$windows_pe_binary_ext->validate

Validate the object using JSON Schema (see STIX::Schema).

SUPPORT

Bugs / Feature Requests

Please report any bugs or feature requests through the issue tracker at https://github.com/giterlizzi/perl-STIX/issues. You will be notified automatically of any progress on your issue.

Source Code

This is open source software. The code repository is available for public review and contribution under the terms of the license.

https://github.com/giterlizzi/perl-STIX

git clone https://github.com/giterlizzi/perl-STIX.git

AUTHOR

• Giuseppe Di Terlizzi <gdt@cpan.org>

LICENSE AND COPYRIGHT

This software is copyright (c) 2024 by Giuseppe Di Terlizzi.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.