Added a method to get the content type of a file in MIME format (example: image/jpeg)

Author: jekil

lib/cuckoo/common/objects.py

@@ -209,6 +209,37 @@ def get_type(self):
 
         return file_type
 
+    def get_content_type(self):
+        """Get MIME content file type (example: image/jpeg).
+        @return: file content type.
+        """
+        file_type = None
+        if HAVE_MAGIC:
+            try:
+                ms = magic.open(magic.MAGIC_MIME)
+                ms.load()
+                file_type = ms.file(self.file_path)
+            except:
+                try:
+                    file_type = magic.from_file(self.file_path, mime=True)
+                except:
+                    pass
+            finally:
+                try:
+                    ms.close()
+                except:
+                    pass
+
+        if file_type is None:
+            try:
+                p = subprocess.Popen(["file", "-b", "--mime-type", self.file_path],
+                                     stdout=subprocess.PIPE)
+                file_type = p.stdout.read().strip()
+            except:
+                pass
+
+        return file_type
+
     def get_yara(self, rulepath=os.path.join(CUCKOO_ROOT, "data", "yara", "index_binaries.yar")):
         """Get Yara signatures matches.
         @return: matched Yara signatures.

tests/objects_tests.py

@@ -62,6 +62,9 @@ def test_get_ssdeep(self):
     def test_get_type(self):
         assert_equal("empty", self.file.get_type())
 
+    def test_get_content_type(self):
+        assert_equal("inode/x-empty", self.file.get_content_type())
+
     def test_get_all_type(self):
         assert isinstance(self.file.get_all(), dict)