Files
malwarefrank-dnfile/tests/test_invalid_streams.py
2024-03-23 03:59:39 +00:00

29 lines
622 B
Python

import fixtures
import dnfile
def test_duplicate_stream():
path = fixtures.DATA / "invalid-streams" / "duplicate-stream.exe"
dn = dnfile.dnPE(path)
assert b"#US" in dn.net.metadata.streams
assert dn.net.user_strings.get(1).value == "BBBBBBBB"
def test_unknown_stream():
path = fixtures.DATA / "invalid-streams" / "unknown-stream.exe"
dn = dnfile.dnPE(path)
assert b"#ZZ" in dn.net.metadata.streams
def test_invalid_stream_name():
path = fixtures.DATA / "invalid-streams" / "invalid-stream-name.exe"
dn = dnfile.dnPE(path)
assert b"#\x90\x90" in dn.net.metadata.streams