Emit "dotnet" as format to ResultDocument when processing .NET files (#…

…2024) * Refactor format in `capa/features/extractors/dotnetfile.py` Signed-off-by: samadpls <[email protected]> * updated chanalog.md with the changes Signed-off-by: samadpls <[email protected]> * Refractor CHANGELOG.md Co-authored-by: Mike Hunhoff <[email protected]> --------- Signed-off-by: samadpls <[email protected]> Co-authored-by: Mike Hunhoff <[email protected]>
mandiant · Mar 20, 2024 · 7bc298d · 7bc298d
1 parent cbadab8
commit 7bc298d
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,7 @@
 # Change Log
 
 ## master (unreleased)
+- Emit "dotnet" as format to ResultDocument when processing .NET files #2024 @samadpls
 
 ### New Features
 

diff --git a/capa/features/extractors/dotnetfile.py b/capa/features/extractors/dotnetfile.py
@@ -49,8 +49,8 @@
 
 
 def extract_file_format(**kwargs) -> Iterator[Tuple[Format, Address]]:
-    yield Format(FORMAT_PE), NO_ADDRESS
     yield Format(FORMAT_DOTNET), NO_ADDRESS
+    yield Format(FORMAT_PE), NO_ADDRESS
 
 
 def extract_file_import_names(pe: dnfile.dnPE, **kwargs) -> Iterator[Tuple[Import, Address]]: