Merge pull request #71 from avast/LZ_Installers_FlyStudio

Added tests for YARA rules for FlyStudio
avast · Sep 18, 2020 · 6b1e3e2 · 6b1e3e2
2 parents 54fdfb7 + 7d5bdb0
commit 6b1e3e2
Show file tree

Hide file tree

Showing 3 changed files with 20 additions and 0 deletions.
diff --git a/tools/fileinfo/detection/installers/fly_studio/04d0163cfa2c35b1c34c2669cc9c53e5.ex b/tools/fileinfo/detection/installers/fly_studio/04d0163cfa2c35b1c34c2669cc9c53e5.ex
diff --git a/tools/fileinfo/detection/installers/fly_studio/067bc8935fed7e353168eef7592bb7e3.ex b/tools/fileinfo/detection/installers/fly_studio/067bc8935fed7e353168eef7592bb7e3.ex
diff --git a/tools/fileinfo/detection/installers/fly_studio/test.py b/tools/fileinfo/detection/installers/fly_studio/test.py
@@ -0,0 +1,20 @@
+from regression_tests import *
+
+class Test(Test):
+    settings = TestSettings(
+        tool='fileinfo',
+        input=[
+            '04d0163cfa2c35b1c34c2669cc9c53e5.ex',
+            '067bc8935fed7e353168eef7592bb7e3.ex'
+        ],
+        args='--json'
+    )
+
+    def test_correctly_analyzes_input_file(self):
+        create_install_recognized = False
+
+        self.assertTrue(self.fileinfo.succeeded)
+        for tool in self.fileinfo.output['tools']:
+            if tool['type'] == 'installer' and tool['name'] == 'FlyStudio':
+                create_install_recognized = True
+        self.assertTrue(create_install_recognized)