Fixes issue mandiant#937: Show Offset and VirtAddr for language-specific strings: Go and Rust

Author: divyansh360

floss/language/go/extract.py

@@ -435,11 +435,11 @@ def get_file_offset_in_blob(sample: pathlib.Path) -> int:
         string_blob_start, _ = find_string_blob_range(pe, struct_strings)
     except ValueError:
         return -1
-    
+
     image_base = pe.OPTIONAL_HEADER.ImageBase
     virtual_address = string_blob_start - image_base
     pointer_to_raw_data = pe.get_offset_from_rva(string_blob_start - image_base)
-    
+
     return image_base + virtual_address - pointer_to_raw_data
 
 

floss/main.py

@@ -709,7 +709,7 @@ def main(argv=None) -> int:
 
             if args.verbose:
                 results.metadata.file_offset = floss.language.rust.extract.get_file_offset_in_rdata(sample)
-            
+
     if (
         results.analysis.enable_decoded_strings
         or results.analysis.enable_stack_strings

floss/render/default.py

@@ -171,12 +171,14 @@ def strtime(seconds):
     return f"{m:02.0f}:{s:02.0f}"
 
 
-def render_language_strings(language, language_strings, language_strings_missed, file_offset, console, verbose, disable_headers):
+def render_language_strings(
+    language, language_strings, language_strings_missed, file_offset, console, verbose, disable_headers
+):
     strings = sorted(language_strings + language_strings_missed, key=lambda s: s.offset)
     render_heading(f"FLOSS {language.upper()} STRINGS ({len(strings)})", console, verbose, disable_headers)
     offset_len = len(f"{strings[-1].offset}")
     va_offset_len = len(f"{strings[-1].offset + file_offset}")
-    
+
     if verbose != Verbosity.DEFAULT:
         # add column headers
         table = Table(