malwaredb-virustotal 0.0.2

Logic and datatypes for interacting with VirusTotal
Documentation

MalwareDB VirusTotal Client

TestLint

This is logic for interacting with VirusTotal's V3 API. At present, only the following actions are supported:

  • Fetch file report: this gets the anti-virus scan data for a given sample, and there are examples in the testdata/ directory.
  • Request re-scan: ask VirusTotal to run a given sample through their collection of anti-virus applications and analysis tools.
  • Submit a sample: send a sample to VirusTotal for analysis.

VirusTotal supports these actions given a MD5, SHA-1, or SHA-256 hash.

Crates chrono and serde are used to parse timestamps and deserialize the data into Structs for ease and convenience of working with this data.

Note: at present, the response objects may contain either the response error code, or the expected response data. In the future, this will be changes to be more intuitive, a response error or HTTP error should be a real error, and the expected response should be the only data in the Result::Ok return.