mirror of
https://github.com/hanzoui/custom-nodes-security-scan.git
synced 2026-10-30 20:56:54 +00:00
30 lines
1.1 KiB
Python
30 lines
1.1 KiB
Python
# Copyright (C) 2010-2013 Claudio Guarnieri.
|
|
# Copyright (C) 2014-2016 Cuckoo Foundation.
|
|
# This file is part of Cuckoo Sandbox - http://www.cuckoosandbox.org
|
|
# See the file 'docs/LICENSE' for copying permission.
|
|
|
|
from lib.common.abstracts import Package
|
|
from lib.common.rand import random_string
|
|
|
|
class Generic(Package):
|
|
"""Generic analysis package.
|
|
The sample is started using START command in a cmd.exe prompt.
|
|
"""
|
|
PATHS = [
|
|
("System32", "cmd.exe"),
|
|
]
|
|
|
|
def start(self, path):
|
|
cmd_path = self.get_path("cmd.exe")
|
|
|
|
# Create random cmd.exe window title.
|
|
rand_title = random_string(4, 16)
|
|
|
|
# START syntax.
|
|
# See: https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/start.mspx?mfr=true
|
|
# start ["title"] [/dPath] [/i] [/min] [/max] [{/separate | /shared}]
|
|
# [{/low | /normal | /high | /realtime | /abovenormal | belownormal}]
|
|
# [/wait] [/b] [FileName] [parameters]
|
|
args = ["/c", "start", "/wait", '"%s"' % rand_title, path]
|
|
return self.execute(cmd_path, args=args, trigger="file:%s" % path)
|