Package security.whisper.javastix.coo.extension.types

Interface WindowsPeBinaryFileExtensionExt

All Superinterfaces:
CyberObservableExtension, CyberObservableExtensionCommonProperties, GenericValidation, SdoDefaultValidator, StixCustomProperties
All Known Implementing Classes:
WindowsPeBinaryFileExtension
@Immutable @DefaultTypeValue(value="windows-pebinary-ext", groups=DefaultValuesProcessor.class) @AllowedParents(FileCoo.class) public interface WindowsPeBinaryFileExtensionExt extends CyberObservableExtension
The Windows PE Binary File extension specifies a default extension for capturing properties specific to Windows portable executable (PE) files.

  • Method Details

    • getPeType

      @JsonPropertyDescription("Specifies the type of the PE binary. Open Vocabulary - windows-pebinary-type-ov") @NotNull @Vocab(WindowsPeBinaryTypes.class) @NotNull @Vocab(WindowsPeBinaryTypes.class) String getPeType()

    • getImphash

      @JsonPropertyDescription("Specifies the special import hash, or \'imphash\', calculated for the PE Binary based on its imported libraries and functions.") Optional<String> getImphash()

    • getMachineHex

      @JsonPropertyDescription("Specifies the type of target machine.") Optional<@Pattern(regexp="^([a-fA-F0-9]{2})+$") String> getMachineHex()

    • getNumberOfSections

      @JsonPropertyDescription("Specifies the number of sections in the PE binary, as a non-negative integer.") Optional<Long> getNumberOfSections()

    • getTimeDateStamp

      @JsonPropertyDescription("Specifies the time when the PE binary was created. The timestamp value MUST BE precise to the second.") Optional<StixInstant> getTimeDateStamp()

    • getPointerToSymbolTableHex

      @JsonPropertyDescription("Specifies the file offset of the COFF symbol table.") Optional<@Pattern(regexp="^([a-fA-F0-9]{2})+$") String> getPointerToSymbolTableHex()

    • getNumberOfSymbols

      @JsonPropertyDescription("Specifies the number of entries in the symbol table of the PE binary, as a non-negative integer.") Optional<Long> getNumberOfSymbols()

    • getSizeOfOptionalHeader

      @JsonPropertyDescription("Specifies the size of the optional header of the PE binary.") Optional<@PositiveOrZero Long> getSizeOfOptionalHeader()

    • getCharacteristicsHex

      @JsonPropertyDescription("Specifies the flags that indicate the file\u2019s characteristics.") Optional<@Pattern(regexp="^([a-fA-F0-9]{2})+$") String> getCharacteristicsHex()

    • getFileHeaderHashes

      @JsonPropertyDescription("Specifies any hashes that were computed for the file header.") Map<@Length(min=3,max=256) @HashingVocab(HashingAlgorithms.class) String,String> getFileHeaderHashes()

    • getOptionalHeader

      @JsonPropertyDescription("Specifies the PE optional header of the PE binary.") Optional<WindowsPeOptionalHeaderObj> getOptionalHeader()

    • getSections

      @JsonPropertyDescription("Specifies metadata about the sections in the PE file.") default Set<WindowsPeSectionObj> getSections()