64 lines
1.2 KiB
Nix
64 lines
1.2 KiB
Nix
{ lib
|
|
, buildPythonPackage
|
|
, capstone
|
|
, click
|
|
, cryptography
|
|
, dnfile
|
|
, fetchFromGitHub
|
|
, pefile
|
|
, pycryptodomex
|
|
, pyelftools
|
|
, pythonOlder
|
|
, pytestCheckHook
|
|
, typing-extensions
|
|
, yara-python
|
|
}:
|
|
|
|
buildPythonPackage rec {
|
|
pname = "malduck";
|
|
version = "4.3.2";
|
|
format = "setuptools";
|
|
|
|
disabled = pythonOlder "3.7";
|
|
|
|
src = fetchFromGitHub {
|
|
owner = "CERT-Polska";
|
|
repo = pname;
|
|
rev = "refs/tags/v${version}";
|
|
hash = "sha256-3joIfhQBJzKdoU3FNW/yAHsQa/lMMbw3wGEQTyOBrOQ=";
|
|
};
|
|
|
|
propagatedBuildInputs = [
|
|
capstone
|
|
click
|
|
cryptography
|
|
dnfile
|
|
pefile
|
|
pycryptodomex
|
|
pyelftools
|
|
typing-extensions
|
|
yara-python
|
|
];
|
|
|
|
postPatch = ''
|
|
substituteInPlace requirements.txt \
|
|
--replace "pefile==2019.4.18" "pefile" \
|
|
--replace "dnfile==0.11.0" "dnfile"
|
|
'';
|
|
|
|
nativeCheckInputs = [
|
|
pytestCheckHook
|
|
];
|
|
|
|
pythonImportsCheck = [
|
|
"malduck"
|
|
];
|
|
|
|
meta = with lib; {
|
|
description = "Helper for malware analysis";
|
|
homepage = "https://github.com/CERT-Polska/malduck";
|
|
changelog = "https://github.com/CERT-Polska/malduck/releases/tag/v${version}";
|
|
license = with licenses; [ bsd3 ];
|
|
maintainers = with maintainers; [ fab ];
|
|
};
|
|
}
|