Package modules :: Package signatures :: Module creates_exe :: Class CreatesExe
[hide private]
[frames] | no frames]

Class CreatesExe

source code

                           object --+    
                                    |    
lib.cuckoo.common.abstracts.Signature --+
                                        |
                                       CreatesExe

Instance Methods [hide private]
 
run(self)
Start signature processing.
source code

Inherited from lib.cuckoo.common.abstracts.Signature: __init__, as_result, check_api, check_argument, check_argument_call, check_domain, check_file, check_ip, check_key, check_mutex, check_url, get_argument, on_call, on_complete

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  name = 'creates_exe'
  description = 'Creates a Windows executable on the filesystem'
  severity = 2
  categories = ['generic']
  authors = ['Cuckoo Developers']
  minimum = '0.5'
hash(x)
  enabled = False

Inherited from lib.cuckoo.common.abstracts.Signature: alert, evented, families, filter_apinames, filter_categories, filter_processnames, maximum, order, references

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

run(self)

source code 

Start signature processing.

Parameters:
  • results - analysis results.
Raises:
  • NotImplementedError - this method is abstract.
Overrides: lib.cuckoo.common.abstracts.Signature.run
(inherited documentation)