- 论坛徽章:
- 2
|
回复 1# yqhzh
- awk '{print gensub(/.*vfile_size=([^<]+)<>virus_id=([^<]+)<>vfile_type=([^<]+).*/,"\\1<>\\2<>\\3",1) >"file1";
- virus_id=gensub(/.*virus_id=([^<]+).*/,"\\1",1,$0);
- FS="<>section_name_[0-9]+=|<>section_attri_[0-9]+=|<>section_sig_[0-9]+=";
- $0=$0;
- sub(/<>.*/,"",$NF);for(i=2;i<=NF;i+=3){print virus_id "<>" $i "<>" $(i+1) "<>" $(i+2) >>"file2"}}' file
- head file1 file2
- ==> file1 <==
- 1712640<>001789dcd2a7971780de6e17ea6a043b<>.exe
- ==> file2 <==
- 001789dcd2a7971780de6e17ea6a043b<>.text<>Code<>1450496:13dc57f1f345db57c95f7dae4ec0943e
- 001789dcd2a7971780de6e17ea6a043b<>.itext<>Code<>5632:3956ef551a960a3329ab4762ff3414b9
- 001789dcd2a7971780de6e17ea6a043b<>.data<>Others<>23552:94b06c9b5a772008a1a74c43f46543fb
- 001789dcd2a7971780de6e17ea6a043b<>.bss<>Others<>0:2547f62c939e2b2a1141006197cb75cc
- 001789dcd2a7971780de6e17ea6a043b<>.idata<>Others<>14848:439ea2610580ed8fd841528471fcd637
- 001789dcd2a7971780de6e17ea6a043b<>.didata<>Others<>1024:59ce6a2442d06738c9b36d6143068d98
- 001789dcd2a7971780de6e17ea6a043b<>.tls<>Others<>0:567f538333cab8399d92974f06bb28ad
- 001789dcd2a7971780de6e17ea6a043b<>.rdata<>Others<>512:220b362c20df1885c3e7757266388994
- 001789dcd2a7971780de6e17ea6a043b<>.reloc<>Others<>133632:008ebd8c03b0fac489e3c95faf2af141
- 001789dcd2a7971780de6e17ea6a043b<>.rsrc<>Others<>81920:fc13eb8c19ee0cabedc45295b5768465
复制代码 |
|