macho

Documentation

Index

• type Architecture
• type Info
  • func Parse(r io.ReaderAt) (*Info, error)
• type Section
• type Signature

Types

type Architecture

type Architecture struct {
	CPU       string     `json:"cpu"`
	Sections  []Section  `json:"sections,omitempty"`
	Libraries []string   `json:"libraries,omitempty"`
	Imports   []string   `json:"imports,omitempty"`
	Exports   []string   `json:"exports,omitempty"`
	Packer    string     `json:"packer,omitempty"`
	Symhash   string     `json:"symhash,omitempty"`
	Signature *Signature `json:"signature,omitempty"`
}

Architecture represents a fat file architecture

type Info

type Info struct {
	Architectures []*Architecture `json:"architectures,omitempty"`
}

Info contains high level fingerprinting an analysis of a mach-o file.

func Parse

func Parse(r io.ReaderAt) (*Info, error)

Parse parses the mach-o file and returns information about it or errors.

type Section

type Section struct {
	Name      string  `json:"name"`
	Address   uint64  `json:"address"`
	Size      uint64  `json:"size"`
	Entropy   float64 `json:"entropy"`
	ChiSquare float64 `json:"chi2"`
	MD5       string  `json:"md5,omitempty"`
}

Section contains information about a section in a mach-o file.

type Signature

type Signature struct {
	Signer string `json:"signer"`
	CDHash string `json:"cdhash"`
}

Signature contains signing information about a binary