@@ -0,0 +1,48 @@
1+{ lib
2+, buildPythonPackage
3+, capstone
4+, click
5+, cryptography
6+, fetchFromGitHub
7+, pefile
8+, pycryptodomex
9+, pyelftools
10+, pythonOlder
11+, typing-extensions
12+, yara-python
13+}:
14+
15+buildPythonPackage rec {
16+ pname = "malduck";
17+ version = "4.1.0";
18+ disabled = pythonOlder "3.7";
19+
20+ src = fetchFromGitHub {
21+ owner = "CERT-Polska";
22+ repo = pname;
23+ rev = "v${version}";
24+ sha256 = "04d8bhzax9ynbl83hif9i8gcs29zrvcay2r6n7mcxiixlxcqciak";
25+ };
26+
27+ propagatedBuildInputs = [
28+ capstone
29+ click
30+ cryptography
31+ pefile
32+ pycryptodomex
33+ pyelftools
34+ typing-extensions
35+ yara-python
36+ ];
37+
38+ # Project has no tests. They will come with the next release
39+ doCheck = false;
40+ pythonImportsCheck = [ "malduck" ];
41+
42+ meta = with lib; {
43+ description = "Helper for malware analysis";
44+ homepage = "https://github.com/CERT-Polska/malduck";
45+ license = with licenses; [ bsd3 ];
46+ maintainers = with maintainers; [ fab ];
47+ };
48+}