cuckoo3-main[.]zip

resource
unpack002/monitor/windows/amd64/monitor/318a07c2608300d7f3031409520ba8f125f19298/threemon.sys
unpack002/monitor/windows/amd64/stager/57d4e574e968fbe28294f98a5c1339ef3538663f/tmstage.exe
unpack002/monitor/windows/amd64/threemon/monitor/tlssupport/monitor-x64.dll
unpack002/monitor/windows/amd64/threemon/monitor/tlssupport/threemon.sys
unpack002/monitor/windows/amd64/threemon/stager/monitordisable/auxiliary/screenshot.exe
unpack002/monitor/windows/amd64/threemon/stager/monitordisable/tmstage.exe

cuckoo3-main.zip

.zip .ps1

cuckoo3-main/.gitignore

cuckoo3-main/LICENSE

cuckoo3-main/README.md

cuckoo3-main/common/MANIFEST.in

cuckoo3-main/common/cuckoo/common/__init__.py

cuckoo3-main/common/cuckoo/common/analyses.py

cuckoo3-main/common/cuckoo/common/clients.py

cuckoo3-main/common/cuckoo/common/compare.py

cuckoo3-main/common/cuckoo/common/config.py

cuckoo3-main/common/cuckoo/common/data/cwd/elasticsearch/analysesmapping.json

cuckoo3-main/common/cuckoo/common/data/cwd/elasticsearch/eventsmapping.json

cuckoo3-main/common/cuckoo/common/data/cwd/elasticsearch/tasksmapping.json

cuckoo3-main/common/cuckoo/common/data/cwdmigrate.txt

cuckoo3-main/common/cuckoo/common/data/dbmigrations/cuckoodb/alembic.ini

cuckoo3-main/common/cuckoo/common/data/dbmigrations/cuckoodb/env.py

cuckoo3-main/common/cuckoo/common/data/dbmigrations/cuckoodb/script.py.mako

cuckoo3-main/common/cuckoo/common/data/dbmigrations/safelistdb/alembic.ini

cuckoo3-main/common/cuckoo/common/data/dbmigrations/safelistdb/env.py

cuckoo3-main/common/cuckoo/common/data/dbmigrations/safelistdb/script.py.mako

cuckoo3-main/common/cuckoo/common/db.py

cuckoo3-main/common/cuckoo/common/dns.py

cuckoo3-main/common/cuckoo/common/elastic.py

cuckoo3-main/common/cuckoo/common/errors.py

cuckoo3-main/common/cuckoo/common/guest.py

.py .js

cuckoo3-main/common/cuckoo/common/importing.py

cuckoo3-main/common/cuckoo/common/intelmq.py

cuckoo3-main/common/cuckoo/common/ipc.py

cuckoo3-main/common/cuckoo/common/log.py

cuckoo3-main/common/cuckoo/common/machines.py

cuckoo3-main/common/cuckoo/common/migrate.py

cuckoo3-main/common/cuckoo/common/misp.py

cuckoo3-main/common/cuckoo/common/netcapture.py

cuckoo3-main/common/cuckoo/common/node.py

cuckoo3-main/common/cuckoo/common/packages.py

cuckoo3-main/common/cuckoo/common/result.py

cuckoo3-main/common/cuckoo/common/resultstats.py

cuckoo3-main/common/cuckoo/common/route.py

cuckoo3-main/common/cuckoo/common/safelist.py

cuckoo3-main/common/cuckoo/common/shutdown.py

cuckoo3-main/common/cuckoo/common/startup.py

cuckoo3-main/common/cuckoo/common/storage.py

cuckoo3-main/common/cuckoo/common/strictcontainer.py

cuckoo3-main/common/cuckoo/common/submit.py

cuckoo3-main/common/cuckoo/common/targets.py

cuckoo3-main/common/cuckoo/common/task.py

cuckoo3-main/common/cuckoo/common/taskflow.py

cuckoo3-main/common/cuckoo/common/utils.py

cuckoo3-main/common/cuckoo/common/virustotal.py

cuckoo3-main/common/setup.cfg

cuckoo3-main/common/setup.py

.py .sh linux

cuckoo3-main/core/MANIFEST.in

cuckoo3-main/core/README.rst

cuckoo3-main/core/cuckoo/__init__.py

cuckoo3-main/core/cuckoo/clean.py

cuckoo3-main/core/cuckoo/config.py

cuckoo3-main/core/cuckoo/confmigrations.py

cuckoo3-main/core/cuckoo/control.py

cuckoo3-main/core/cuckoo/data/conftemplates/analysissettings.yaml.jinja2

cuckoo3-main/core/cuckoo/data/conftemplates/cuckoo.yaml.jinja2

cuckoo3-main/core/cuckoo/data/conftemplates/distributed.yaml.jinja2

cuckoo3-main/core/cuckoo/data/conftemplates/routing.yaml.jinja2

cuckoo3-main/core/cuckoo/data/dbmigrations/taskqueuedb/alembic.ini

cuckoo3-main/core/cuckoo/data/dbmigrations/taskqueuedb/env.py

cuckoo3-main/core/cuckoo/data/dbmigrations/taskqueuedb/script.py.mako

cuckoo3-main/core/cuckoo/main.py

cuckoo3-main/core/cuckoo/nodeclient.py

cuckoo3-main/core/cuckoo/retriever.py

cuckoo3-main/core/cuckoo/runprocessing.py

cuckoo3-main/core/cuckoo/scheduler.py

cuckoo3-main/core/cuckoo/scripts/__init__.py

cuckoo3-main/core/cuckoo/scripts/cleanup.py

cuckoo3-main/core/cuckoo/scripts/migrate.py

cuckoo3-main/core/cuckoo/scripts/safelist.py

cuckoo3-main/core/cuckoo/startup.py

cuckoo3-main/core/cuckoo/taskqueue.py

cuckoo3-main/core/setup.cfg

cuckoo3-main/core/setup.py

.py .sh linux

cuckoo3-main/devtools/updatecwdhashes.py

.py .sh linux

cuckoo3-main/docs/mkdocs.yml

cuckoo3-main/docs/requirements.txt

cuckoo3-main/docs/src/configuration/cuckooconfs/analysissettingsyaml.md

cuckoo3-main/docs/src/configuration/cuckooconfs/cuckooyaml.md

cuckoo3-main/docs/src/configuration/cuckooconfs/distributedyaml.md

cuckoo3-main/docs/src/configuration/cuckooconfs/nodeconfs/routingyaml.md

cuckoo3-main/docs/src/configuration/cuckooconfs/webconfs/webyaml.md

cuckoo3-main/docs/src/configuration/system.md

cuckoo3-main/docs/src/index.md

cuckoo3-main/docs/src/installation/cuckoo.md

cuckoo3-main/docs/src/installation/deps.md

cuckoo3-main/docs/src/installation/machineries.md

cuckoo3-main/docs/src/installation/routing.md

cuckoo3-main/docs/src/installation/vmcreation.md

cuckoo3-main/docs/src/introduction/cuckoo.md

cuckoo3-main/docs/src/introduction/sandboxing.md

cuckoo3-main/docs/src/usage/commands.md

cuckoo3-main/docs/src/usage/submission/index.md

cuckoo3-main/docs/src/usage/webapi/analysis.json

cuckoo3-main/docs/src/usage/webapi/endpoints.md

cuckoo3-main/docs/src/usage/webapi/post.json

cuckoo3-main/docs/src/usage/webapi/pre.json

cuckoo3-main/docs/src/usage/webapi/setup.md

cuckoo3-main/docs/src/usage/webui/setup.md

cuckoo3-main/docsrfc/rfc/control.md

cuckoo3-main/docsrfc/rfc/cuckoo.md

cuckoo3-main/docsrfc/rfc/machinery.md

cuckoo3-main/docsrfc/rfc/machinerymanager.md

cuckoo3-main/docsrfc/rfc/packages.md

cuckoo3-main/docsrfc/rfc/patternsigs.md

cuckoo3-main/docsrfc/rfc/processing.md

cuckoo3-main/docsrfc/rfc/shutdown.md

cuckoo3-main/docsrfc/rfc/startup.md

cuckoo3-main/docsrfc/rfc/submission.md

cuckoo3-main/docsrfc/rfc/workerhandler.md

cuckoo3-main/install.sh

.sh linux

cuckoo3-main/machineries/MANIFEST.in

cuckoo3-main/machineries/cuckoo/machineries/__init__.py

cuckoo3-main/machineries/cuckoo/machineries/abstracts.py

cuckoo3-main/machineries/cuckoo/machineries/config.py

cuckoo3-main/machineries/cuckoo/machineries/configtools.py

cuckoo3-main/machineries/cuckoo/machineries/confmigrations.py

cuckoo3-main/machineries/cuckoo/machineries/data/conftemplates/kvm.yaml.jinja2

cuckoo3-main/machineries/cuckoo/machineries/data/conftemplates/qemu.yaml.jinja2

cuckoo3-main/machineries/cuckoo/machineries/errors.py

cuckoo3-main/machineries/cuckoo/machineries/modules/__init__.py

cuckoo3-main/machineries/cuckoo/machineries/modules/libvirt.py

cuckoo3-main/machineries/cuckoo/machineries/modules/qemu.py

cuckoo3-main/machineries/setup.cfg

cuckoo3-main/machineries/setup.py

.py .sh linux

cuckoo3-main/monitor.zip

.zip

monitor/windows/amd64/default

monitor/windows/amd64/latest_monitor

monitor/windows/amd64/latest_stager

monitor/windows/amd64/monitor/318a07c2608300d7f3031409520ba8f125f19298/threemon.sys

.exe windows x64

c4f7e7ef58927ec7fc50728fadb55803

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

PsGetCurrentProcessId

DbgPrint

RtlAppendUnicodeToString

RtlAppendUnicodeStringToString

ZwDeleteFile

IoCreateDevice

ZwDeleteKey

ZwOpenKey

ExAllocatePoolWithTag

ProbeForRead

ExFreePoolWithTag

KeUnstackDetachProcess

KeStackAttachProcess

PsSetLoadImageNotifyRoutine

PsSetCreateProcessNotifyRoutineEx

ExInitializePushLock

ExfAcquirePushLockExclusive

PsLookupProcessByProcessId

RtlInitUnicodeString

vDbgPrintEx

MmGetSystemRoutineAddress

PsCreateSystemThread

ZwQueryVirtualMemory

ExfReleasePushLockExclusive

KeSetEvent

KeInitializeEvent

MmBuildMdlForNonPagedPool

IoFreeMdl

KeWaitForSingleObject

IoFreeIrp

IoAllocateIrp

IoAllocateMdl

ZwQueryObject

ZwCreateFile

_snwprintf_s

wcsncmp

ZwQueryInformationFile

CmRegisterCallbackEx

RtlEqualUnicodeString

CmCallbackGetKeyObjectID

RtlGetVersion

tolower

KeClearEvent

ExInterlockedInsertTailList

ExInterlockedRemoveHeadList

ZwQueryInformationProcess

ZwQueryInformationThread

KeBugCheckEx

ExGetPreviousMode

MmIsAddressValid

ZwQuerySystemInformation

ObfDereferenceObject

ZwClose

sprintf_s

_snprintf_s

RtlAssert

IoCreateSymbolicLink

IofCompleteRequest

KeQueryTimeIncrement

IoRegisterShutdownNotification

__C_specific_handler

__chkstk

netio.sys

WskRegister

WskCaptureProviderNPI

fwpkclnt.sys

FwpmEngineOpen0

FwpsCalloutRegister0

FwpmTransactionBegin0

FwpmEngineClose0

FwpmCalloutAdd0

FwpmFilterAdd0

FwpmTransactionAbort0

FwpmTransactionCommit0

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

WriteConsoleW

WaitForMultipleObjects

WaitForSingleObject

VirtualQuery

VirtualFree

VirtualAlloc

SwitchToThread

SuspendThread

SetWaitableTimer

SetUnhandledExceptionFilter

SetProcessPriorityBoost

SetEvent

SetErrorMode

SetConsoleCtrlHandler

ResumeThread

PostQueuedCompletionStatus

LoadLibraryA

LoadLibraryW

SetThreadContext

GetThreadContext

GetSystemInfo

GetSystemDirectoryA

GetStdHandle

GetQueuedCompletionStatus

GetProcessAffinityMask

GetProcAddress

GetEnvironmentStringsW

GetConsoleMode

FreeEnvironmentStringsW

ExitProcess

DuplicateHandle

CreateThread

CreateIoCompletionPort

CreateEventA

CloseHandle

AddVectoredExceptionHandler

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 104KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.symtab
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

monitor/windows/amd64/threemon/default_monitor

monitor/windows/amd64/threemon/default_stager

monitor/windows/amd64/threemon/monitor/tlssupport/monitor-x64.dll

.dll windows x64

3745eae31842404b9931a58b9d9c398e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DEBUG_STRIPPED

IMAGE_FILE_DLL

Imports

kernel32

CloseHandle

CreateFileW

CreateThread

CreateToolhelp32Snapshot

DeleteCriticalSection

DeleteFileA

DuplicateHandle

EnterCriticalSection

ExitProcess

FileTimeToSystemTime

GetCommandLineW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetFullPathNameW

GetLastError

GetLongPathNameW

GetModuleFileNameW

GetModuleHandleA

GetModuleHandleW

GetProcAddress

GetStdHandle

GetSystemInfo

GetSystemTimeAsFileTime

GetTickCount

InitializeCriticalSection

LeaveCriticalSection

LoadLibraryA

OpenMutexA

QueryDosDeviceW

QueryPerformanceCounter

RtlAddFunctionTable

RtlCaptureContext

RtlLookupFunctionEntry

RtlVirtualUnwind

SetErrorMode

SetNamedPipeHandleState

SetUnhandledExceptionFilter

Sleep

SystemTimeToFileTime

TerminateProcess

Thread32First

Thread32Next

TlsAlloc

TlsGetValue

TlsSetValue

TransactNamedPipe

UnhandledExceptionFilter

VirtualAlloc

VirtualProtect

VirtualQuery

WaitForSingleObject

lstrlenW

msvcrt

__dllonexit

__iob_func

_amsg_exit

_initterm

_lock

_onexit

_setjmp

_unlock

_vsnprintf

abort

calloc

exit

fclose

fopen

fprintf

fread

free

fseek

ftell

fwrite

malloc

memcmp

memcpy

memmove

memset

printf

qsort

rand

realloc

signal

sprintf

srand

strchr

strcmp

strcpy

strlen

strncmp

strncpy

strtoul

tolower

vfprintf

wcscat

wcschr

wcscpy

wcsncat

wcsncmp

wcsrchr

_time64

longjmp

_wcsnicmp

_wcsicmp

_strnicmp

_stricmp

Exports

MCInst_Init

MCInst_addOperand2

MCInst_clear

MCInst_getNumOperands

MCInst_getOpcode

MCInst_getOpcodePub

MCInst_getOperand

MCInst_insert0

MCInst_setOpcode

MCInst_setOpcodePub

MCOperand_CreateImm0

MCOperand_CreateImm1

MCOperand_CreateReg0

MCOperand_CreateReg1

MCOperand_Init

MCOperand_getFPImm

MCOperand_getImm

MCOperand_getReg

MCOperand_isFPImm

MCOperand_isImm

MCOperand_isReg

MCOperand_isValid

MCOperand_setFPImm

MCOperand_setImm

MCOperand_setReg

New_ncrypt_PRF

New_ncryptsslp_PRF10

SHA1Input

SHA1PadMessage

SHA1ProcessMessageBlock

SHA1Reset

SHA1Result

SStream_Init

SStream_concat

SStream_concat0

X86_ATT_printInst

X86_Intel_printInst

X86_enable

X86_getInstruction

X86_get_insn_id

X86_insn_name

X86_insn_reg

X86_lockrep

X86_post_printer

X86_reg_name

add_virtual_memory

all_arch

arch_destroy

arch_init

arch_masks

arch_option

array_get

array_init

array_set

array_unset

asm_add_esp_imm

asm_add_regimm

asm_call

asm_get_call_target

asm_get_rel_call_target

asm_get_rel_jump_target

asm_is_abs_call

asm_is_call_function

asm_jregz

asm_jump

asm_jump_32bit

asm_jump_32bit_rel

asm_lea_regregimm

asm_move_regimm

asm_pop_context

asm_pop_register

asm_push

asm_push32

asm_push_context

asm_push_register

asm_push_stack_offset

asm_return

asm_sub_esp_imm

asm_sub_regimm

bson_alloc

bson_append_binary

bson_append_bool

bson_append_bson

bson_append_code

bson_append_code_n

bson_append_code_w_scope

bson_append_code_w_scope_n

bson_append_date

bson_append_double

bson_append_element

bson_append_finish_array

bson_append_finish_object

bson_append_int

bson_append_long

bson_append_maxkey

bson_append_minkey

bson_append_new_oid

bson_append_null

bson_append_oid

bson_append_regex

bson_append_start_array

bson_append_start_object

bson_append_string

bson_append_string_n

bson_append_symbol

bson_append_symbol_n

bson_append_time_t

bson_append_timestamp

bson_append_timestamp2

bson_append_undefined

bson_buffer_size

bson_builder_error

bson_check_field_name

bson_check_string

bson_copy

bson_data

bson_dealloc

bson_destroy

bson_ensure_space

bson_errprintf

bson_fatal

bson_fatal_msg

bson_find

bson_finish

bson_fprintf

bson_free

bson_free_func

bson_init

bson_init_empty

bson_init_finished_data

bson_init_finished_data_with_copy

bson_init_size

bson_init_unfinished_data

bson_init_zero

bson_int64_to_double

bson_iterator_alloc

bson_iterator_bin_data

bson_iterator_bin_len

bson_iterator_bin_type

bson_iterator_bool

bson_iterator_bool_raw

bson_iterator_code

bson_iterator_code_scope_init

bson_iterator_date

bson_iterator_dealloc

bson_iterator_double

bson_iterator_double_raw

bson_iterator_from_buffer

bson_iterator_init

bson_iterator_int

bson_iterator_int_raw

bson_iterator_key

bson_iterator_long

bson_iterator_long_raw

bson_iterator_more

bson_iterator_next

bson_iterator_oid

bson_iterator_regex

bson_iterator_regex_opts

bson_iterator_string

bson_iterator_string_len

bson_iterator_subiterator

bson_iterator_subobject_init

bson_iterator_time_t

bson_iterator_timestamp

bson_iterator_timestamp_increment

bson_iterator_timestamp_time

bson_iterator_type

bson_iterator_value

bson_malloc

bson_malloc_func

bson_numstr

bson_numstrs

bson_oid_from_string

bson_oid_gen

bson_oid_generated_time

bson_oid_to_string

bson_print

bson_print_raw

bson_printf

bson_realloc

bson_realloc_func

bson_set_heap_stuff

bson_set_oid_fuzz

bson_set_oid_inc

bson_shared_empty

bson_size

bson_sprintf

bson_swap_endian32

bson_swap_endian64

bstr_to_asciiz

call_hash

chtmtag_attrs

close_handle

clsid_to_string

config_read

copy_bytes

copy_get_tls

copy_init

copy_ptr

copy_return

copy_strlen

copy_strlenW

copy_uint32

copy_uint64

copy_uintptr

copy_unicodez

copy_utf8_string

copy_utf8_wstring

copy_wcsncpyA

count_positive

cs_close

cs_disasm_ex

cs_errno

cs_free

cs_insn_group

cs_insn_name

cs_mem_calloc

cs_mem_free

cs_mem_malloc

cs_mem_realloc

cs_op_count

cs_op_index

cs_open

cs_option

cs_reg_name

cs_reg_read

cs_reg_write

cs_strdup

cs_strerror

cs_support

cs_version

cs_vsnprintf

decodeInstruction

deref

derefi

destroy_pe_header

diffing_init

disasm

dnq_has32

dnq_has64

dnq_hasptr

dnq_init

dnq_isempty

dnq_iter32

dnq_iter64

dnq_iterptr

duplicate_handle

exploit_get_last_guard_page

exploit_hotpatch_guard_page_referer

exploit_init

exploit_insn_rewrite_to_lea

exploit_is_guard_page_referer_whitelisted

exploit_is_registered_guard_page

exploit_is_stack_pivoted

exploit_makes_heap_executable

exploit_makes_stack_executable

exploit_set_guard_page

exploit_set_last_guard_page

exploit_unset_guard_page

extract_unicode_string_objattr

extract_unicode_string_unistr

find_exception_addresses

find_guard_page_whitelist

first_tid_from_pid

flag_bitmask

flag_value

flash_get_method_name

flash_init

flash_module_offset

free_unicode_buffer

g_extra_virtual_memory

g_flags

g_monitor_end

g_monitor_logging

g_monitor_mode

g_monitor_start

g_monitor_track

get_current_process

get_current_process_id

get_current_thread

get_current_thread_id

get_ip_port

get_last_error

get_module_file_name

get_tick_count

get_unicode_buffer

get_window_thread_process_id

hash_buffer

hash_mem

hash_str

hash_string

hash_stringW

hash_uint64

hexdump

hexencode

hide_module_from_peb

hook

hook_addrcb_IWbemServices_ExecMethod

hook_addrcb_IWbemServices_ExecMethodAsync

hook_addrcb_IWbemServices_ExecQuery

hook_addrcb_IWbemServices_ExecQueryAsync

hook_addrcb_RtlDispatchException

hook_create_jump

hook_create_stub

hook_get_mem

hook_hotpatch_guardpage

hook_in_monitor

hook_init

hook_init2

hook_initcb_LdrLoadDll

hook_insmodulecb_escript_api

hook_insmodulecb_flash32_20_0_0_228

hook_insmodulecb_jscript

hook_insmodulecb_jscript9

hook_insmodulecb_vbscript

hook_insn

hook_library

hook_missing_hooks

hook_modulecb_mshtml

hook_modulecb_ncrypt

hook_modulecb_ncryptsslp

hook_modulecb_vbe6

ht_contains

ht_free

ht_init

ht_insert

ht_insert2

ht_lookup

ht_next_key

ht_remove

iexplore_var_getvalue

ignore_init

ignored_object_add

ignored_object_remove

init_co_create_instance

initialBufferSize

insn_find

int_or_strA

int_or_strW

is_exception_address_whitelisted

is_exception_code_whitelisted

is_ignored_filepath

is_ignored_object_handle

is_ignored_process

is_interesting_hash

is_shutting_down

is_std_handle

iwbem_class_object_to_bson

iwbem_class_object_to_bson_helper

jscript_init

lde

library_from_asciiz

library_from_unicode_string

library_from_unicodez

loaded_modules_enumerate

log_action

log_anomaly

log_api

log_exception

log_explain

log_guardrw

log_init

log_intptr

log_missing_hook

log_new_process

log_string

log_wstring

logging_file_trigger

mem_alloc

mem_alloc_aligned

mem_free

mem_init

mem_realloc

mem_suggested_size

memdup

message_box

misc_init

misc_init2

misc_set_monitor_options

module_addr_timestamp

module_addr_timestamp2

module_addr_timestamp_mod

module_addr_timestamp_modinsn

module_from_address

module_image_size

module_timestamp

monitor_hook

monitor_init

monitor_mode_should_propagate

monitor_unhook

name2id

native_init

ole_enable_hooks

open_thread

our_htonl

our_htons

our_inet_ntoa

our_memcmp

our_memmem

our_memmemW

our_snprintf

our_strlen

our_vsnprintf

our_wcsdup

page_is_readable

parent_process_identifier

path_get_full_pathA

path_get_full_pathW

path_get_full_path_handle

path_get_full_path_objattr

path_get_full_path_unistr

pid_from_process_handle

pid_from_thread_handle

pipe

pipe2

pipe_init

printDstIdx16

printDstIdx32

printDstIdx64

printDstIdx8

printSrcIdx16

printSrcIdx32

printSrcIdx64

printSrcIdx8

query_information_process

query_information_thread

query_key

query_object

range_is_readable

reg_get_info_from_keyvalue

reg_get_key

reg_get_key_ascii

reg_get_key_asciiz

reg_get_key_objattr

reg_get_key_uni

reg_get_key_unistr

reg_get_key_uniz

register_dll_notification

report_tls_key

resume_thread

resume_thread_identifier

roundup2

safe_array_destroy

search_deref

secbuf_get_buffer

set_bson_err_handler

set_last_error

set_named_pipe_handle_mode

set_processor_count

set_std_handle

sha1

sig_apiname

sig_category

sig_count

sig_flag_name

sig_flag_value

sig_hook_count

sig_hooks

sig_index_action

sig_index_anomaly

sig_index_exception

sig_index_firsthookidx

sig_index_guardrw

sig_index_missing

sig_index_process

sig_param_name

sig_paramtypes

slab_getmem

slab_init

slab_return_last

slab_size

sleep

sleep_apply_filetime

sleep_apply_systemtime

sleep_init

sleep_skip

sleep_skip_disable

sleep_skipped

stacktrace

symbol

symbol_enumerate_module

symbol_init

sys_alloc_string_len

sys_string_cmp

sys_string_length

tid_from_thread_handle

transact_named_pipe

ultostr

unhook_detect_add_region

unhook_detect_disable

unhook_detect_enable

unhook_detect_remove_dead_regions

unhook_init_detection

unhook_library

utf8_bytecnt_ascii

utf8_bytecnt_unicode

IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

monitor/windows/amd64/threemon/monitor/tlssupport/threemon.sys

.exe windows x64

a65cd1249f2c57a1d5e8ab7006955489

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

ZwQueryVirtualMemory

PsGetCurrentProcessId

DbgPrint

RtlAppendUnicodeToString

RtlAppendUnicodeStringToString

ZwDeleteFile

IoCreateDevice

ZwDeleteKey

ZwOpenKey

ExAllocatePoolWithTag

ProbeForRead

ExFreePoolWithTag

KeUnstackDetachProcess

KeStackAttachProcess

RtlDowncaseUnicodeString

RtlFreeUnicodeString

PsSetLoadImageNotifyRoutine

PsSetCreateProcessNotifyRoutineEx

PsProcessType

ExInitializePushLock

ExfAcquirePushLockExclusive

PsLookupProcessByProcessId

RtlInitUnicodeString

vDbgPrintEx

MmGetSystemRoutineAddress

ExGetPreviousMode

KeQueryTimeIncrement

ExfReleasePushLockExclusive

ObOpenObjectByPointer

KeSetEvent

KeInitializeEvent

MmBuildMdlForNonPagedPool

IoFreeMdl

KeWaitForSingleObject

IoFreeIrp

IoAllocateIrp

IoAllocateMdl

ZwQueryObject

ZwCreateFile

_snwprintf_s

wcsncmp

ZwQueryInformationFile

CmRegisterCallbackEx

RtlEqualUnicodeString

CmCallbackGetKeyObjectID

RtlGetVersion

tolower

KeClearEvent

ExInterlockedInsertTailList

ExInterlockedRemoveHeadList

ZwQueryInformationProcess

ZwQueryInformationThread

KeBugCheckEx

MmIsAddressValid

ZwQuerySystemInformation

ObfDereferenceObject

ZwClose

ZwReadFile

sprintf_s

_snprintf_s

RtlAssert

IoCreateSymbolicLink

IofCompleteRequest

PsCreateSystemThread

IoRegisterShutdownNotification

__C_specific_handler

__chkstk

netio.sys

WskRegister

WskCaptureProviderNPI

fwpkclnt.sys

FwpmEngineOpen0

FwpsCalloutRegister0

FwpmTransactionBegin0

FwpmEngineClose0

FwpmCalloutAdd0

FwpmFilterAdd0

FwpmTransactionAbort0

FwpmTransactionCommit0

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

WriteConsoleW

WaitForMultipleObjects

WaitForSingleObject

VirtualQuery

VirtualFree

VirtualAlloc

SwitchToThread

SuspendThread

Sleep

SetWaitableTimer

SetUnhandledExceptionFilter

SetProcessPriorityBoost

SetEvent

SetErrorMode

SetConsoleCtrlHandler

ResumeThread

PostQueuedCompletionStatus

LoadLibraryA

LoadLibraryW

SetThreadContext

GetThreadContext

GetSystemInfo

GetSystemDirectoryA

GetStdHandle

GetQueuedCompletionStatusEx

GetProcessAffinityMask

GetProcAddress

GetEnvironmentStringsW

GetConsoleMode

FreeEnvironmentStringsW

ExitProcess

DuplicateHandle

CreateWaitableTimerExW

CreateThread

CreateIoCompletionPort

CreateEventA

CloseHandle

AddVectoredExceptionHandler

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

monitor/windows/amd64/threemon/stager/monitordisable/tmstage.exe

.exe windows x64

4035d2883e01d64f3e7a9dccb1d63af5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

WriteConsoleW

WaitForMultipleObjects

WaitForSingleObject

VirtualQuery

VirtualFree

VirtualAlloc

SwitchToThread

SuspendThread

Sleep

SetWaitableTimer

SetUnhandledExceptionFilter

SetProcessPriorityBoost

SetEvent

SetErrorMode

SetConsoleCtrlHandler

ResumeThread

PostQueuedCompletionStatus

LoadLibraryA

LoadLibraryW

SetThreadContext

GetThreadContext

GetSystemInfo

GetSystemDirectoryA

GetStdHandle

GetQueuedCompletionStatusEx

GetProcessAffinityMask

GetProcAddress

GetEnvironmentStringsW

GetConsoleMode

FreeEnvironmentStringsW

ExitProcess

DuplicateHandle

CreateWaitableTimerExW

CreateThread

CreateIoCompletionPort

CreateEventA

CloseHandle

AddVectoredExceptionHandler

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

cuckoo3-main/node/MANIFEST.in

cuckoo3-main/node/cuckoo/node/__init__.py

cuckoo3-main/node/cuckoo/node/config.py

cuckoo3-main/node/cuckoo/node/confmigrations.py

cuckoo3-main/node/cuckoo/node/control.py

cuckoo3-main/node/cuckoo/node/data/conftemplates/routing.yaml.jinja2

cuckoo3-main/node/cuckoo/node/data/cwd/rooter/scripts/openvpnroutes.sh

.sh linux

cuckoo3-main/node/cuckoo/node/data/cwdmigrate.txt

cuckoo3-main/node/cuckoo/node/machinery.py

cuckoo3-main/node/cuckoo/node/main.py

cuckoo3-main/node/cuckoo/node/node.py

cuckoo3-main/node/cuckoo/node/resultserver.py

cuckoo3-main/node/cuckoo/node/rooter/__init__.py

cuckoo3-main/node/cuckoo/node/rooter/errors.py

cuckoo3-main/node/cuckoo/node/rooter/rooter.py

cuckoo3-main/node/cuckoo/node/rooter/undoable.py

cuckoo3-main/node/cuckoo/node/rooter/vpn.py

cuckoo3-main/node/cuckoo/node/scripts/__init__.py

cuckoo3-main/node/cuckoo/node/scripts/rooter.py

cuckoo3-main/node/cuckoo/node/startup.py

cuckoo3-main/node/cuckoo/node/taskflow.py

cuckoo3-main/node/cuckoo/node/taskrunner.py

cuckoo3-main/node/cuckoo/node/webapi.py

cuckoo3-main/node/setup.cfg

cuckoo3-main/node/setup.py

.py .sh linux

cuckoo3-main/processing/MANIFEST.in

cuckoo3-main/processing/README.rst

cuckoo3-main/processing/cuckoo/processing/__init__.py

cuckoo3-main/processing/cuckoo/processing/abtracts.py

cuckoo3-main/processing/cuckoo/processing/cfgextr/__init__.py

cuckoo3-main/processing/cuckoo/processing/cfgextr/cfgextr.py

cuckoo3-main/processing/cuckoo/processing/cfgextr/emotet.py

cuckoo3-main/processing/cuckoo/processing/config.py

cuckoo3-main/processing/cuckoo/processing/confmigrations.py

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/elasticsearch.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/identification.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/intelmq.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/misp.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/post.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/suricata.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/conftemplates/virustotal.yaml.jinja2

cuckoo3-main/processing/cuckoo/processing/data/cwd/signatures/mitreattack/attack.json

cuckoo3-main/processing/cuckoo/processing/data/cwd/signatures/peutils/userdb.txt

cuckoo3-main/processing/cuckoo/processing/data/cwdmigrate.txt

cuckoo3-main/processing/cuckoo/processing/errors.py

cuckoo3-main/processing/cuckoo/processing/event/__init__.py

cuckoo3-main/processing/cuckoo/processing/event/events.py

cuckoo3-main/processing/cuckoo/processing/event/filetools.py

cuckoo3-main/processing/cuckoo/processing/event/processtools.py

cuckoo3-main/processing/cuckoo/processing/event/reader.py

cuckoo3-main/processing/cuckoo/processing/event/registrytools.py

cuckoo3-main/processing/cuckoo/processing/event/translate/__init__.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/__init__.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/autogen_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/debug_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/file_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/inject_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/mutant_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/network_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/notification_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/process_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/reader.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/registry_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/suspicious_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/thread_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/vminfo_pb2.py

cuckoo3-main/processing/cuckoo/processing/event/translate/threemon/whois_pb2.py

cuckoo3-main/processing/cuckoo/processing/family.py

cuckoo3-main/processing/cuckoo/processing/identification/__init__.py

cuckoo3-main/processing/cuckoo/processing/identification/ignore.py

cuckoo3-main/processing/cuckoo/processing/identification/selection.py

cuckoo3-main/processing/cuckoo/processing/post/__init__.py

cuckoo3-main/processing/cuckoo/processing/post/cfgextr.py

cuckoo3-main/processing/cuckoo/processing/post/eventconsumer/__init__.py

cuckoo3-main/processing/cuckoo/processing/post/eventconsumer/eventlogs.py

cuckoo3-main/processing/cuckoo/processing/post/eventconsumer/injection.py

cuckoo3-main/processing/cuckoo/processing/post/eventconsumer/patternsigs.py

cuckoo3-main/processing/cuckoo/processing/post/eventconsumer/suspicious.py

cuckoo3-main/processing/cuckoo/processing/post/intelmq.py

cuckoo3-main/processing/cuckoo/processing/post/misp.py

cuckoo3-main/processing/cuckoo/processing/post/network.py

cuckoo3-main/processing/cuckoo/processing/post/networkids.py

cuckoo3-main/processing/cuckoo/processing/post/screenshot.py

cuckoo3-main/processing/cuckoo/processing/pre/__init__.py

cuckoo3-main/processing/cuckoo/processing/pre/intelmq.py

cuckoo3-main/processing/cuckoo/processing/pre/launchargs.py

cuckoo3-main/processing/cuckoo/processing/pre/misp.py

cuckoo3-main/processing/cuckoo/processing/pre/prepare.py

cuckoo3-main/processing/cuckoo/processing/pre/static.py

cuckoo3-main/processing/cuckoo/processing/pre/virustotal.py

cuckoo3-main/processing/cuckoo/processing/pre/yara.py

cuckoo3-main/processing/cuckoo/processing/reporting/__init__.py

cuckoo3-main/processing/cuckoo/processing/reporting/disk.py

cuckoo3-main/processing/cuckoo/processing/reporting/elastic.py

cuckoo3-main/processing/cuckoo/processing/reporting/intelmq.py

cuckoo3-main/processing/cuckoo/processing/reporting/misp.py

cuckoo3-main/processing/cuckoo/processing/safelist/__init__.py

cuckoo3-main/processing/cuckoo/processing/scripts/proccessingtool.py

cuckoo3-main/processing/cuckoo/processing/scripts/signaturecompile.py

.py .sh linux

cuckoo3-main/processing/cuckoo/processing/signatures/__init__.py

cuckoo3-main/processing/cuckoo/processing/signatures/pattern.py

cuckoo3-main/processing/cuckoo/processing/signatures/signature.py

cuckoo3-main/processing/cuckoo/processing/signatures/yarasigs.py

cuckoo3-main/processing/cuckoo/processing/static/__init__.py

cuckoo3-main/processing/cuckoo/processing/static/office.py

cuckoo3-main/processing/cuckoo/processing/static/pe.py

cuckoo3-main/processing/cuckoo/processing/tag.py

cuckoo3-main/processing/cuckoo/processing/ttp.py

cuckoo3-main/processing/cuckoo/processing/worker.py

cuckoo3-main/processing/setup.cfg

cuckoo3-main/processing/setup.py

.py .sh linux

cuckoo3-main/signatures.zip

.zip

cuckoo3-main/web/cuckoo/web/__init__.py

cuckoo3-main/web/cuckoo/web/analyses/__init__.py

cuckoo3-main/web/cuckoo/web/analyses/urls.py

cuckoo3-main/web/cuckoo/web/analyses/views.py

cuckoo3-main/web/cuckoo/web/analysis/task/urls.py

cuckoo3-main/web/cuckoo/web/analysis/task/views.py

cuckoo3-main/web/cuckoo/web/analysis/urls.py

cuckoo3-main/web/cuckoo/web/analysis/views.py

cuckoo3-main/web/cuckoo/web/api/__init__.py

cuckoo3-main/web/cuckoo/web/api/analyses/__init__.py

cuckoo3-main/web/cuckoo/web/api/analyses/urls.py

cuckoo3-main/web/cuckoo/web/api/analyses/views.py

cuckoo3-main/web/cuckoo/web/api/analysis/__init__.py

cuckoo3-main/web/cuckoo/web/api/analysis/task/__init__.py

cuckoo3-main/web/cuckoo/web/api/analysis/task/urls.py

cuckoo3-main/web/cuckoo/web/api/analysis/task/views.py

cuckoo3-main/web/cuckoo/web/api/analysis/urls.py

cuckoo3-main/web/cuckoo/web/api/analysis/views.py

cuckoo3-main/web/cuckoo/web/api/apikey.py

cuckoo3-main/web/cuckoo/web/api/asgi.py

cuckoo3-main/web/cuckoo/web/api/confgen.py

cuckoo3-main/web/cuckoo/web/api/importing/__init__.py

cuckoo3-main/web/cuckoo/web/api/importing/urls.py

cuckoo3-main/web/cuckoo/web/api/importing/views.py

cuckoo3-main/web/cuckoo/web/api/manage.py

.py .sh linux

cuckoo3-main/web/cuckoo/web/api/settings.py

cuckoo3-main/web/cuckoo/web/api/startup.py

cuckoo3-main/web/cuckoo/web/api/submit/__init__.py

cuckoo3-main/web/cuckoo/web/api/submit/urls.py

cuckoo3-main/web/cuckoo/web/api/submit/views.py

cuckoo3-main/web/cuckoo/web/api/targets/__init__.py

cuckoo3-main/web/cuckoo/web/api/targets/file/__init__.py

cuckoo3-main/web/cuckoo/web/api/targets/file/urls.py

cuckoo3-main/web/cuckoo/web/api/targets/file/views.py

cuckoo3-main/web/cuckoo/web/api/targets/urls.py

cuckoo3-main/web/cuckoo/web/api/urls.py

cuckoo3-main/web/cuckoo/web/api/wsgi.py

cuckoo3-main/web/cuckoo/web/clientsrc/README.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/index.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/package/concept.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/package/getting-started.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/banner.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/box.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/button.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/column.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/container.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/details.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/footer.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/form.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/helpers.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/icon.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/json-expander.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/list.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/misc.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/navbar.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/popover.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/process-tree.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/reset.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/section.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/tab.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/table.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/tag.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/typography.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/var.md

cuckoo3-main/web/cuckoo/web/clientsrc/docs/ui-kit/view.md

cuckoo3-main/web/cuckoo/web/clientsrc/package-lock.json

cuckoo3-main/web/cuckoo/web/clientsrc/package.json

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_banner.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_box.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_button.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_column.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_container.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_details.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_footer.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_form.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_func.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_grid.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_helpers.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_icon.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_json-expander.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_list.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_misc.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_navbar.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_popover.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_process-tree.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_reset.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_screenshot-viewer.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_section.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_tab.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_table.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_tag.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_typography.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_var.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/_view.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/theme.sass

cuckoo3-main/web/cuckoo/web/clientsrc/sass/ui.sass

cuckoo3-main/web/cuckoo/web/compare/__init__.py

cuckoo3-main/web/cuckoo/web/compare/urls.py

cuckoo3-main/web/cuckoo/web/compare/views.py

cuckoo3-main/web/cuckoo/web/config.py

cuckoo3-main/web/cuckoo/web/confmigrations.py

cuckoo3-main/web/cuckoo/web/converters.py

cuckoo3-main/web/cuckoo/web/dashboard/__init__.py

cuckoo3-main/web/cuckoo/web/dashboard/urls.py

cuckoo3-main/web/cuckoo/web/dashboard/views.py

cuckoo3-main/web/cuckoo/web/data/conftemplates/web.yaml.jinja2

cuckoo3-main/web/cuckoo/web/data/cwd/web/api_local_settings.py

cuckoo3-main/web/cuckoo/web/data/cwd/web/web_local_settings.py

cuckoo3-main/web/cuckoo/web/data/cwdmigrate.txt

cuckoo3-main/web/cuckoo/web/decorators.py

cuckoo3-main/web/cuckoo/web/manage.py

.py .sh linux

cuckoo3-main/web/cuckoo/web/search/__init__.py

cuckoo3-main/web/cuckoo/web/search/urls.py

cuckoo3-main/web/cuckoo/web/search/views.py

cuckoo3-main/web/cuckoo/web/static/css/fontawesome.css

cuckoo3-main/web/cuckoo/web/static/css/theme.css

cuckoo3-main/web/cuckoo/web/static/css/ui.css

cuckoo3-main/web/cuckoo/web/static/images/cef_logo_2.png

.png

cuckoo3-main/web/cuckoo/web/static/images/logo.png

.png

cuckoo3-main/web/cuckoo/web/static/js/analysis.compare.js

.js

cuckoo3-main/web/cuckoo/web/static/js/analysis.js

.js

cuckoo3-main/web/cuckoo/web/static/js/chart.min.js

.js

cuckoo3-main/web/cuckoo/web/static/js/chartjs-adapter-luxon.min.js

.js

cuckoo3-main/web/cuckoo/web/static/js/hashrouter.js

.js

cuckoo3-main/web/cuckoo/web/static/js/luxon.min.js

.js

cuckoo3-main/web/cuckoo/web/static/js/search.js

.js

cuckoo3-main/web/cuckoo/web/static/js/statistics.js

.js

cuckoo3-main/web/cuckoo/web/static/js/submit.form.js

cuckoo3-main/web/cuckoo/web/static/js/submit.settings.js

.js

cuckoo3-main/web/cuckoo/web/static/js/ui.js

.js

cuckoo3-main/web/cuckoo/web/static/js/webcomponent.countdown-timer.js

.js

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-brands-400.eot

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-brands-400.svg

.xml

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-brands-400.ttf

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-brands-400.woff

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-brands-400.woff2

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-regular-400.eot

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-regular-400.svg

.xml

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-regular-400.ttf

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-regular-400.woff

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-regular-400.woff2

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-solid-900.eot

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-solid-900.svg

.xml

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-solid-900.ttf

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-solid-900.woff

cuckoo3-main/web/cuckoo/web/static/webfonts/fa-solid-900.woff2

cuckoo3-main/web/cuckoo/web/submit/__init__.py

cuckoo3-main/web/cuckoo/web/submit/urls.py

cuckoo3-main/web/cuckoo/web/submit/views.py

cuckoo3-main/web/cuckoo/web/templates/analyses/index.html.jinja2

.js

cuckoo3-main/web/cuckoo/web/templates/analysis/compare.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/behavioral-map.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/compare-tasks.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/intelmq.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/misp.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/mitre.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/office.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/pefiles.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/static-signatures.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/summary.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/components/virustotal.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/error.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/analysis/index.html.jinja2

.js

cuckoo3-main/web/cuckoo/web/templates/analysis/static.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/base.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/compare/compare.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/compare/index.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/dashboard/index.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/macros.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/overview.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/partial/analysis-index.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/partial/footer.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/partial/navbar.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/search/index.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/submit/index.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/submit/loading.html.jinja2

.js

cuckoo3-main/web/cuckoo/web/templates/submit/partial/filetree.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/submit/partial/machinery.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/submit/partial/options.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/submit/partial/tabbar.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/submit/settings.html.jinja2

.js

cuckoo3-main/web/cuckoo/web/templates/task/components/cfgextr.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/intelmq.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/machine.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/misp.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/dns.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/domain.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/host.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/http.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/smtp.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/tcp.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/network/udp.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/processes.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/screenshot.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/settings.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/signatures.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/suricata.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/components/task.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/error.html.jinja2

cuckoo3-main/web/cuckoo/web/templates/task/index.html.jinja2

.js

cuckoo3-main/web/cuckoo/web/uiapi/__init__.py

cuckoo3-main/web/cuckoo/web/uiapi/analyses/__init__.py

cuckoo3-main/web/cuckoo/web/uiapi/analyses/task/__init__.py

cuckoo3-main/web/cuckoo/web/uiapi/analyses/task/urls.py

cuckoo3-main/web/cuckoo/web/uiapi/analyses/task/views.py

cuckoo3-main/web/cuckoo/web/uiapi/analyses/urls.py

cuckoo3-main/web/cuckoo/web/uiapi/analyses/views.py

cuckoo3-main/web/cuckoo/web/uiapi/search/__init__.py

cuckoo3-main/web/cuckoo/web/uiapi/search/urls.py

cuckoo3-main/web/cuckoo/web/uiapi/search/views.py

cuckoo3-main/web/cuckoo/web/uiapi/statistics/__init__.py

cuckoo3-main/web/cuckoo/web/uiapi/statistics/urls.py

cuckoo3-main/web/cuckoo/web/uiapi/statistics/views.py

cuckoo3-main/web/cuckoo/web/uiapi/urls.py

cuckoo3-main/web/cuckoo/web/web/asgi.py

cuckoo3-main/web/cuckoo/web/web/confgen.py

cuckoo3-main/web/cuckoo/web/web/jinja/__init__.py

cuckoo3-main/web/cuckoo/web/web/jinja/env.py

cuckoo3-main/web/cuckoo/web/web/jinja/filters.py

cuckoo3-main/web/cuckoo/web/web/settings.py

cuckoo3-main/web/cuckoo/web/web/startup.py

cuckoo3-main/web/cuckoo/web/web/urls.py

cuckoo3-main/web/cuckoo/web/web/wsgi.py

cuckoo3-main/web/setup.cfg

cuckoo3-main/web/setup.py

.py .sh linux

Sharing

General

Malware Config

Signatures

Files

c4f7e7ef58927ec7fc50728fadb55803

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

netio.sys

fwpkclnt.sys

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 3KB - Virtual size: 31KB

.pdata Size: 3KB - Virtual size: 3KB

INIT Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

91802a615b3a5c4bcc05bc5f66a5b219

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 104KB - Virtual size: 301KB

/4 Size: 512B - Virtual size: 281B

/19 Size: 197KB - Virtual size: 197KB

/32 Size: 45KB - Virtual size: 44KB

/46 Size: 12KB - Virtual size: 12KB

/63 Size: 20KB - Virtual size: 20KB

/80 Size: 512B - Virtual size: 42B

/99 Size: 327KB - Virtual size: 326KB

/112 Size: 196KB - Virtual size: 195KB

/124 Size: 66KB - Virtual size: 66KB

.idata Size: 1KB - Virtual size: 1KB

.symtab Size: 209KB - Virtual size: 209KB

3745eae31842404b9931a58b9d9c398e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 117KB - Virtual size: 116KB

.data Size: 88KB - Virtual size: 87KB

.rdata Size: 220KB - Virtual size: 219KB

.pdata Size: 8KB - Virtual size: 7KB

.xdata Size: 7KB - Virtual size: 7KB

.bss Size: - Virtual size: 1.4MB

.edata Size: 14KB - Virtual size: 13KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 104B

.reloc Size: 7KB - Virtual size: 6KB

a65cd1249f2c57a1d5e8ab7006955489

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

netio.sys

fwpkclnt.sys

Sections

.text Size: 95KB - Virtual size: 94KB

.rdata Size: 33KB - Virtual size: 32KB

.data Size: 3KB - Virtual size: 32KB

.pdata Size: 3KB - Virtual size: 3KB

INIT Size: 2KB - Virtual size: 2KB

.reloc Size: 1KB - Virtual size: 1KB

4035d2883e01d64f3e7a9dccb1d63af5

Headers

DLL Characteristics

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 3KB - Virtual size: 31KB

.pdata
Size: 3KB - Virtual size: 3KB

INIT
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 104KB - Virtual size: 301KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 197KB - Virtual size: 197KB

/32
Size: 45KB - Virtual size: 44KB

/46
Size: 12KB - Virtual size: 12KB

/63
Size: 20KB - Virtual size: 20KB

/80
Size: 512B - Virtual size: 42B

/99
Size: 327KB - Virtual size: 326KB

/112
Size: 196KB - Virtual size: 195KB

/124
Size: 66KB - Virtual size: 66KB

.idata
Size: 1KB - Virtual size: 1KB

.symtab
Size: 209KB - Virtual size: 209KB

.text
Size: 117KB - Virtual size: 116KB

.data
Size: 88KB - Virtual size: 87KB

.rdata
Size: 220KB - Virtual size: 219KB

.pdata
Size: 8KB - Virtual size: 7KB

.xdata
Size: 7KB - Virtual size: 7KB

.bss
Size: - Virtual size: 1.4MB

.edata
Size: 14KB - Virtual size: 13KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 104B

.reloc
Size: 7KB - Virtual size: 6KB

.text
Size: 95KB - Virtual size: 94KB

.rdata
Size: 33KB - Virtual size: 32KB

.data
Size: 3KB - Virtual size: 32KB

.pdata
Size: 3KB - Virtual size: 3KB

INIT
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1KB - Virtual size: 1KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 109KB - Virtual size: 408KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 45KB - Virtual size: 44KB

.symtab
Size: 512B - Virtual size: 4B

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 117KB - Virtual size: 416KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 207KB - Virtual size: 206KB

/32
Size: 41KB - Virtual size: 40KB

/46
Size: 512B - Virtual size: 24B

/65
Size: 419KB - Virtual size: 418KB

/78
Size: 196KB - Virtual size: 196KB

/90
Size: 74KB - Virtual size: 73KB

.idata
Size: 1KB - Virtual size: 1KB

.reloc
Size: 45KB - Virtual size: 45KB

.symtab
Size: 174KB - Virtual size: 174KB