tjh.dev
1{ lib
2, buildPythonPackage
3, capstone
4, click
5, cryptography
6, fetchFromGitHub
7, pefile
8, pycryptodomex
9, pyelftools
10, pythonOlder
11, typing-extensions
12, yara-python
13}:
14
15buildPythonPackage rec {
16 pname = "malduck";
17 version = "4.1.0";
18 disabled = pythonOlder "3.7";
19
20 src = fetchFromGitHub {
21 owner = "CERT-Polska";
22 repo = pname;
23 rev = "v${version}";
24 sha256 = "04d8bhzax9ynbl83hif9i8gcs29zrvcay2r6n7mcxiixlxcqciak";
25 };
26
27 propagatedBuildInputs = [
28 capstone
29 click
30 cryptography
31 pefile
32 pycryptodomex
33 pyelftools
34 typing-extensions
35 yara-python
36 ];
37
38 # Project has no tests. They will come with the next release
39 doCheck = false;
40 pythonImportsCheck = [ "malduck" ];
41
42 meta = with lib; {
43 description = "Helper for malware analysis";
44 homepage = "https://github.com/CERT-Polska/malduck";
45 license = with licenses; [ bsd3 ];
46 maintainers = with maintainers; [ fab ];
47 };
48}