Python modules for impfuzzy
Project description
pyimpfuzzy is python module which calculate and compare the impfuzzy(import fuzzy hashing)
More details are described in the following documents:
https://www.jpcert.or.jp/magazine/acreport-impfuzzy.html (Japanese)
http://blog.jpcert.or.jp/2016/05/classifying-mal-a988.html (English)
Requirements
pyimpfuzzy requires the following modules:
pefile 1.2.10-139 or later
Installation
$ pip install pyimpfuzzy
Usage
get_impfuzzy - return the impfuzzy hash for a given file
get_impfuzzy_data - return the impfuzzy hash for a buffer
hash_compare - return the match between 2 hashes
Example Usage
import pyimpfuzzy import sys hash1 = pyimpfuzzy.get_impfuzzy(sys.argv[1]) hash2 = pyimpfuzzy.get_impfuzzy(sys.argv[2]) print("ImpFuzzy1: %s" % hash1) print("ImpFuzzy2: %s" % hash2) print("Compare: %i" % pyimpfuzzy.hash_compare(hash1, hash2))
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
pyimpfuzzy-0.2.tar.gz
(2.5 kB
view hashes)