text: # Copyright (C) 2010-2015 Cuckoo Foundation.
  # This file is part of Cuckoo Sandbox - http://www.cuckoosandbox.org
  # This signature was contributed by RedSocks - http://redsocks.nl
  # See the file 'docs/LICENSE' for copying permission.
  
  from lib.cuckoo.common.abstracts import Signature
  
  class KrepperMutexes(Signature):
      name = "krepper_mutexes"
      description = "Creates known Krepper P2P Worm mutexes"
      severity = 3
      categories = ["worm"]
      families = ["krepper"]
      authors = ["RedSocks"]
      minimum = "2.0"
  
      mutexes_re = [
          ".*sndcfg16",
      ]
  
      def on_complete(self):
          for indicator in self.mutexes_re:
              mutex = self.check_mutex(pattern=indicator, regex=True)
              if mutex:
                  self.mark_ioc("mutex", mutex)
  
          return self.has_marks()
  