hackedteam/test-av

View on GitHub
analyzer/windows/lib/core/packages.py

Summary

Maintainability
A
2 hrs
Test Coverage
# Copyright (C) 2010-2012 Cuckoo Sandbox Developers.
# This file is part of Cuckoo Sandbox - http://www.cuckoosandbox.org
# See the file 'docs/LICENSE' for copying permission.

def choose_package(file_type):
    """Choose analysis package due to file type.
    @param file_type: file type.
    @return: package or None.
    """
    if not file_type:
        return None

    if "DLL" in file_type:
        return "dll"
    elif "PE32" in file_type or "MS-DOS" in file_type:
        return "exe"
    elif "PDF" in file_type:
        return "pdf"
    elif "Rich Text Format" in file_type:
        return "doc"
    elif "Microsoft Excel" in file_type:
        return "xls"
    else:
        return None