wip: read negative numbers

mandiant · Jun 3, 2024 · f98465a · f98465a
1 parent 36cb7d9
commit f98465a
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/capa/features/extractors/binexport2/insn.py b/capa/features/extractors/binexport2/insn.py
@@ -178,10 +178,12 @@ def extract_insn_number_features(
 
                 # handling continues below at label: has a value
 
-            elif symbol.startswith("0x"):
+            elif symbol.startswith(("0x", "-0x")):
                 # like:
                 # - type: SYMBOL
                 #   symbol: "0x1000"
+                # - type: SYMBOL
+                #   symbol: "-0x1"
                 try:
                     value = int(symbol, 0x10)
                 except ValueError: