jbremer / cuckoo

62%

master: 62%

LAST BUILD ON BRANCH dde2

branch: dde2

CHANGE BRANCH

x

Reset

• dde2
• 2.0.0
• 2.0.1a1
• 2.0.5.2
• 206
• 2061
• 2062
• 64bit0
• actual-tesseract-fix
• analyzer-unittest
• anonymous-reprocess
• api-unic
• cfg1
• cleanup-webif
• compat1
• config-caching
• core-aborted
• core-submit
• critical-timeout
• cwd-migr
• cwddel
• dashb1
• dashboard
• data-init-file
• data-init-file2
• dde1
• dist0
• dist1
• dist2
• dumpmem0
• dumpmem1
• eggh021
• elastic-mongo-abstract
• empty-reprocess
• ensure-archives
• esmerge
• expose0
• extend-task
• extr-wheel
• extracted
• extracted3
• feedback
• finalize-database-migration
• finalize-import
• fix-screenshots
• fixup-fileupload
• fixup-machine-app
• fixup-rooter
• global-db-instance
• high0
• ifconfig
• inetsim2
• init-binaries
• json-speedup
• kernel
• kernel2
• large-file-support
• lib-issue
• linux-analysis
• linux2
• lnk-support
• load-signatures
• logging-tweak
• macosx0
• macosx1
• macosx2
• macosx3
• macro
• magic
• magic0
• magic1
• magic64
• mainexc
• master
• merge-http
• merge-pcap
• misc-changes
• mongo-abstract
• mongo-connect
• mongo-testing
• monitor-fixes
• newdocs2
• no-tesseract-warning
• none-filetype
• obsolete-dirs
• package
• pcap1
• pcapwebif
• pdf-report
• pdf-update
• pdf0
• performance
• pidfile
• pipinst
• postsubmit-page
• ppid0
• pr-merge1
• preinstall
• procmem
• ps1trail
• rarfile
• rdp
• rdp-merge0
• recentfiles
• recentfiles2
• recentfiles3
• reinstall
• relative-webif
• releases
• rename
• replay
• replay1
• requests2.13
• reworkscheduler
• rooter1
• scheduler
• sdist
• setup.py-exceptions
• sflock-api
• sflock-upd
• simplify-packages
• startup-tweaks
• stricter-packages
• stuff1
• submit-urls
• test0
• things
• travis-macosx
• tweaks1
• uni0
• uni1
• unicode-filenames
• unicode-support
• unicwd
• unilog
• upd-deps
• upd-setuptools
• ux-fixes
• ux-merges
• view-tasks
• virtualbox-tweakings
• virtualbox-tweaks
• vm1
• vmrouting-tweak1
• volatility
• volatility-coverage
• vpn-routing
• wip-jbr
• yara-offsets
• yara360
• yara361
• yara362
• yaraload
• yaramatchstrings

Build # 767

Build Type

push

travis-ci

Committed by jbremer

Commit Message

further streamline extractor support for handling office files

This commit introduces and improves a number of things related to static
analysis of malicious Microsoft Office files. In particular:
* Extend Extractor logic to allow for static-only analysis.
* Enhance Yara integration allowing it to take external variables,
  perform on in-memory buffers, and work correctly with Office archives.
* Improve parsing logic of cmd.exe in our Scripting engine.
* More Extracted Artefacts logic and handling as well as versioning.
* Various tweaks and improvements.

This commit is mostly complete, however, it could certainly use more
error/exception handling. We should also more generically catch
exceptions thrown in Extractor plugins.

Run Details

9131 of 14824 relevant lines covered (61.6%)

1.21 hits per line