CodeTypeType Data Type The data type specifies the type of code. Its core value SHOULD be a literal found in the enumeration. It extends CodeTypeType CodeTypeEnum the data type, in order to permit complex (i.e., regular-expression based) specifications. BaseObjectPropertyType CodeSegmentXORType Data Type Used to encapsulate a segment of code that has been XORed with a pattern in order to avoid tripping anti-virus detection. The UML diagram corresponding to the class is shown in Figure 32. CodeSegmentXORType Figure . UML diagram of the data type CodeSegmentXORType The property table of the class is given in Table 32. CodeSegmentXORType . Properties of the class CodeSegmentXORType Name Type Multiplicity Description The property contains a xor_pattern 16-hexadecimal-character hex string, represents the pattern that the Code_Segment_XOR field should be xor_pattern 0..1 basicDataTypes:HexBinary XORed with in order to recover the actual code. The default value is 55AA55AA55AA55BB, as specified by IETF RFC 5901. CodePurposeType Data Type The data type specifies the intended purposes of the code. Its core value SHOULD be a literal found in the CodePurposeType enumeration. It extends the data type, in order to permit complex (i.e., regular-expression CodePurposeEnum BaseObjectPropertyType based) specifications.
CodeTypeType Data Type The CodeTypeType data type specifies the type of code. Its core value SHOULD be a literal found in the CodeTypeEnum enumeration. It extends the BaseObjectPropertyType data type, in order to permit complex (i.e., regular-expression based) specifications. CodeSegmentXORType Data Type Used to encapsulate a segment of code that has been XORed with a pattern in order to avoid tripping anti-virus detection. The UML diagram corresponding to the CodeSegmentXORType class is shown in Figure 32. Figure . UML diagram of the CodeSegmentXORType data type The property table of the CodeSegmentXORType class is given in Table 32. . Properties of the CodeSegmentXORType class Name Type Multiplicity Description xor_pattern basicDataTypes:HexBinary 0..1 The xor_pattern property contains a 16-hexadecimal-character hex string, represents the pattern that the Code_Segment_XOR field should be XORed with in order to recover the actual code. The default value is 55AA55AA55AA55BB, as specified by IETF RFC 5901. CodePurposeType Data Type The CodePurposeType data type specifies the intended purposes of the code. Its core value SHOULD be a literal found in the CodePurposeEnum enumeration. It extends the BaseObjectPropertyType data type, in order to permit complex (i.e., regular-expression based) specifications.
cybox-v2.1.1-csprd01-part14-code.docx