Package modules :: Package signatures :: Module creates_exe :: Class CreatesExe
[hide private]
[frames] | no frames]

Class CreatesExe

source code

                           object --+    
                                    |    
lib.cuckoo.common.abstracts.Signature --+
                                        |
                                       CreatesExe

Instance Methods [hide private]
 
on_complete(self)
Signature is notified when all API calls have been processed.
source code

Inherited from lib.cuckoo.common.abstracts.Signature: __init__, check_dll_loaded, check_domain, check_file, check_ip, check_key, check_mutex, check_url, get_apkinfo, get_command_lines, get_dll_loaded, get_droidmon, get_files, get_googleplay, get_keys, get_mutexes, get_net_domains, get_net_generic, get_net_hosts, get_net_http, get_net_http_ex, get_net_icmp, get_net_irc, get_net_smtp, get_net_udp, get_process_by_pid, get_processes, get_results, get_summary, get_summary_generic, get_virustotal, get_volatility, get_wmi_queries, has_marks, init, mark, mark_call, mark_ioc, mark_vol, on_call, on_process, on_signature, results

Inherited from object: __delattr__, __format__, __getattribute__, __hash__, __new__, __reduce__, __reduce_ex__, __repr__, __setattr__, __sizeof__, __str__, __subclasshook__

Class Variables [hide private]
  name = "creates_exe"
  description = "Creates a Windows executable on the filesystem"
  severity = 2
  categories = ["generic"]
  authors = ["Cuckoo Developers"]
  minimum = "2.0"
hash(x)
  enabled = False

Inherited from lib.cuckoo.common.abstracts.Signature: alert, families, filter_apinames, filter_categories, markcount, maximum, on_call_dispatch, order, platform, references

Properties [hide private]

Inherited from object: __class__

Method Details [hide private]

on_complete(self)

source code 

Signature is notified when all API calls have been processed.

Overrides: lib.cuckoo.common.abstracts.Signature.on_complete
(inherited documentation)