malwaredb-server 0.3.4

Server data storage logic for MalwareDB.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137

# MalwareDB Entity Relationships
Some field names are shortened from the actual name in the database so the image (hopefully) looks better. Ex: `fid` becomes `fileid`, `sid` becomes `sourceid`, etc.

```mermaid
erDiagram
    FILE ||--|{ FILE-SOURCE : from
    FILE {
        int id PK
        string sha1
        string sha256
        string sha384
        string sha512
        string md5
        string lzjd
        string ssdeep
        string tlsh
        int size
        float entropy
        timestamp added
    }
    FILE |{--|| FILETYPE : is
    FILETYPE {
        int id PK
        string magic
        string name
        string description
        bool isExecutable
    }
    FILE |{--|| POLYGLOT : is
    FILETYPE ||--|{ POLYGLOT : has
    POLYGLOT {
        int fid PK
        int tid PK
        string explanation
    }
    FILE |o--|| EXECUTABLE : is
    EXECUTABLE {
        int fid PK
        string pehash
        string importhash
        string importhashfuzzy
        boolean packed
        int sections
        string sectionnames
        float sectionentropies
        string sectionsexecutable
    }
    FILE |o--|| PDF : is
    PDF {
        int fid PK
        string author
        string title
        int pages
        boolean forms
        boolean javascript
    }
    SOURCE ||--|{ FILE-SOURCE : contains
    SOURCE }|--|| GROUP-SOURCE : permission
    SOURCE ||--|| SOURCE : hierarchy
    SOURCE {
        int id PK
        string name
        string description
        string url
        timestamp firstacquisition
        parent int
    }
    FILE-SOURCE {
        int fileid PK
        int sourceid PK
        int userid PK
        string filename
        timestamp firstseen
    }
    PERSON ||--|| FILE-SOURCE : uploader
    PERSON |{--|| USER-GROUP : member
    PERSON {
        int id PK
        string email
        string fname
        string lname
        string password
        string apikey
        timestamp created
        boolean readonly
    }
    GROUP |{--|| USER-GROUP : membership
    GROUP |{--|| GROUP-SOURCE : permission
    GROUP ||--|| GROUP : hierarchy
    GROUP {
        int id pk
        string name
        string description
        int parent
    }
    USER-GROUP {
        int uid PK
        int gid PK
        timestamp added
    }
    GROUP-SOURCE {
        int gid PK
        int sid PK
        timestamp added
    }
    LABEL ||--|| LABEL : hierarchy
    LABEL |{--|| FILE-LABEL : has
    LABEL |{--|| SOURCE-LABEL : has
    LABEL {
        int id PK
        string name
        int parent
    }
    FILE-LABEL ||--}| FILE : has
    FILE-LABEL {
        int fid PK
        int lid PK
        timestamp added
    }
    SOURCE-LABEL ||--}| SOURCE : has
    SOURCE-LABEL {
        int sid PK
        int lid PK
        timestamp added
    }
    PAGINATION {
        uuid id PK
        int userid FK
        int next_fileid FK
        string query
        string query_type "Enum options: search, similaritysearch"
        int total_results
        timestamp created
    }
    PAGINATION ||--}| PERSON : has
    PAGINATION ||--|| FILE : has
```