gdetect

type AvResult struct {
	AVName string `json:"av"`
	Result string `json:"result"`
	Score  int    `json:"score"`
}

type Client struct {
	Endpoint   string
	Token      string
	HttpClient *http.Client
}

type ExtendedGDetectSubmitter interface {
	GetResultByUUID(ctx context.Context, uuid string) (result Result, err error)
	GetResultBySHA256(ctx context.Context, sha256 string) (result Result, err error)
	GetResults(ctx context.Context, from int, size int, tags ...string) (submissions []Submission, err error)
	SubmitFile(ctx context.Context, filepath string, options SubmitOptions) (uuid string, err error)
	SubmitReader(ctx context.Context, r io.Reader, options SubmitOptions) (uuid string, err error)
	WaitForFile(ctx context.Context, filepath string, options WaitForOptions) (result Result, err error)
	WaitForReader(ctx context.Context, r io.Reader, options WaitForOptions) (result Result, err error)
	ExtractTokenViewURL(result *Result) (urlTokenView string, err error)
	ExtractExpertViewURL(result *Result) (urlExpertView string, err error)
	GetFullSubmissionByUUID(ctx context.Context, uuid string) (result interface{}, err error)
	GetProfileStatus(ctx context.Context) (status ProfileStatus, err error)
	GetAPIVersion(ctx context.Context) (version string, err error)
}

type FeatureNotAvailableError struct {
	Version string
}

type FileResult struct {
	SHA256    string     `json:"sha256"`
	SHA1      string     `json:"sha1"`
	MD5       string     `json:"md5"`
	SSDeep    string     `json:"ssdeep"`
	Magic     string     `json:"magic"`
	AVResults []AvResult `json:"av_results,omitempty"`
	Size      int64      `json:"size"`
	IsMalware bool       `json:"is_malware"`
}

type GDetectSubmitter interface {
	GetResultByUUID(ctx context.Context, uuid string) (result Result, err error)
	GetResultBySHA256(ctx context.Context, sha256 string) (result Result, err error)
	GetResults(ctx context.Context, from int, size int, tags ...string) (submissions []Submission, err error)
	SubmitFile(ctx context.Context, filepath string, options SubmitOptions) (uuid string, err error)
	SubmitReader(ctx context.Context, r io.Reader, options SubmitOptions) (uuid string, err error)
	WaitForFile(ctx context.Context, filepath string, options WaitForOptions) (result Result, err error)
	WaitForReader(ctx context.Context, r io.Reader, options WaitForOptions) (result Result, err error)
	GetProfileStatus(ctx context.Context) (status ProfileStatus, err error)
	GetAPIVersion(ctx context.Context) (version string, err error)
}

type HTTPError struct {
	Status string
	Code   int
	Body   string
}

type ProfileStatus struct {
	// DailyQuota is the amount of analyses allowed in 24h
	DailyQuota int `json:"daily_quota"`
	// AvailableDailyQuota is the amount of analyses currently available
	AvailableDailyQuota int `json:"available_daily_quota"`
	// Cache is true if the profile is configured to use detect SHA256 cache
	Cache bool `json:"cache"`
	// EstimatedAnalysisDuration is an estimated duration for the next analysis in milliseconds
	// It's an optimistic estimation based on the average analysis time and the analysis queue
	EstimatedAnalysisDuration int `json:"estimated_analysis_duration"`
}

type Result struct {
	UUID      string            `json:"uuid"`
	SHA256    string            `json:"sha256"`
	SHA1      string            `json:"sha1"`
	MD5       string            `json:"md5"`
	SSDeep    string            `json:"ssdeep"`
	Malware   bool              `json:"is_malware"`
	Score     int               `json:"score"`
	Done      bool              `json:"done"`
	Timestamp int64             `json:"timestamp"`
	Errors    map[string]string `json:"errors,omitempty"`
	Error     string            `json:"error,omitempty"`
	FileType  string            `json:"filetype"`
	FileSize  int64             `json:"size"`
	Filenames []string          `json:"filenames,omitempty"`
	Malwares  []string          `json:"malwares,omitempty"`
	Files     []FileResult      `json:"files,omitempty"`
	SID       string            `json:"sid,omitempty"`
	Comment   string            `json:"comment,omitempty"`
	FileCount int               `json:"file_count"`
	Duration  int64             `json:"duration"`
	Token     string            `json:"token,omitempty"`
	Threats   map[string]Threat `json:"threats,omitempty"`
}

type Submission struct {
	UUID     string   `json:"uuid"`
	Malware  bool     `json:"is_malware"`
	Done     bool     `json:"done"`
	Error    bool     `json:"error"`
	Filename string   `json:"filename"`
	Date     int64    `json:"date"`
	FileSize int64    `json:"file_size"`
	FileType string   `json:"file_type"`
	Score    int      `json:"score"`
	Malwares []string `json:"malwares"`
}

type SubmitOptions struct {
	Tags            []string
	Description     string
	BypassCache     bool
	Filename        string
	ArchivePassword string
}

type Tag struct {
	Name  string `json:"name"`
	Value string `json:"value"`
}

type Threat struct {
	Filenames []string `json:"filenames"`
	Tags      []Tag    `json:"tags"`
	Score     int      `json:"score"`
	Magic     string   `json:"magic"`
	SHA256    string   `json:"sha256"`
	SHA1      string   `json:"sha1"`
	MD5       string   `json:"md5"`
	SSDeep    string   `json:"ssdeep"`
	FileSize  int64    `json:"file_size"`
	Mime      string   `json:"mime"`
}

type WaitForOptions struct {
	Tags            []string
	Description     string
	BypassCache     bool
	ArchivePassword string
	Timeout         time.Duration
	PullTime        time.Duration
	Filename        string
}