msix

kevoreilly · Oct 17, 2023 · 3835f82 · 3835f82
1 parent 42444d2
commit 3835f82
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/lib/cuckoo/common/demux.py b/lib/cuckoo/common/demux.py
@@ -174,6 +174,8 @@ def _sf_children(child: sfFile) -> bytes:
         or is_valid_package(child.package)
         or is_valid_type(child.magic)
         or (not ext and is_valid_type(child.magic))
+        # msix
+        or all([pattern in child.contents for pattern in (b"Registry.dat", b"AppxManifest.xml")])
     ):
         target_path = os.path.join(tmp_path, "cuckoo-sflock")
         if not path_exists(target_path):

diff --git a/pyproject.toml b/pyproject.toml
@@ -28,7 +28,7 @@ requests-file = "1.5.1"
 orjson = "3.8.5"
 # maec = "4.1.0.17"
 regex = "2021.7.6"
-SFlock2 = {version = "0.3.54", extras = ["shellcode"]}
+SFlock2 = {version = "0.3.55", extras = ["shellcode"]}
 pyattck = "7.1.1"
 # volatility3 = "2.0.0"
 # XLMMacroDeobfuscator = "0.2.7"