Maturity: Win. Executable File Object

Jump to bottom Edit New page

Ivan Kirillov edited this page Oct 9, 2015 · 2 revisions

Maturity Spectrum Rationale

Semantic Consensus: Low

The Windows Executable File Object is an extension of the File Object, so it inherits the same semantic issues, discussed here.

Semantic Completeness: Medium

There are a few fields that could be added to the Windows Executable File Object, such as for the capture of import hashes.

Existing Use: Medium

There is some known use of the Windows Executable File Object, primarily through MAEC and its sandbox translator utilities.