containers.cpp File Reference

#include "containers.h"
#include "error_message.h"
#include "utils.h"
#include "Configuration.hpp"

Go to the source code of this file.

Functions
std::string	BuildContainerCommandLine (Configuration::ContainerType ext)
ERRORCODE	StartContainers (std::vector< Configuration::ContainerType > selectedExtensibility)

Function Documentation

BuildContainerCommandLine()

std::string BuildContainerCommandLine

(

Configuration::ContainerType

ext

)

Definition at line 6 of file containers.cpp.

{
    std::string localPath = GetCurrentPath();
    std::string extPath = localPath + "\\ext\\";
    std::string result = "\"" + localPath + "\\PanoptesContainer.exe" + "\" \"";
 
    switch (ext) {
    case CONTAINER_TYPE_YARA:
        result.append(extPath + EXT_YARA);
        break;
    case CONTAINER_TYPE_AMSI:
        result.append(extPath + EXT_AMSI);
        break;
    case CONTAINER_TYPE_PE:
        result.append(extPath + EXT_PE);
        break;
    default:
        break;
    }
    result.append("\"");
 
    return result;
}

References EXT_AMSI, EXT_PE, EXT_YARA, GetCurrentPath(), and result.

Referenced by StartContainers().

StartContainers()

ERRORCODE StartContainers

(

std::vector< Configuration::ContainerType >

selectedExtensibility

)

Definition at line 30 of file containers.cpp.

                                                                                       {
 
    if (selectedExtensibility.size() < 1)
    {
        return EXT_SELECTED;
    }
 
    BOOL containerStartupSuccess = true;
    STARTUPINFOA startupInfo;
    PROCESS_INFORMATION processInformation;
 
    ZeroMemory(&startupInfo, sizeof(startupInfo));
    startupInfo.cb = sizeof(startupInfo);
    ZeroMemory(&processInformation, sizeof(processInformation));
 
    for (auto containerType : selectedExtensibility) {
        std::string cmdStr = BuildContainerCommandLine(containerType);
#ifdef _DEBUG
        DWORD creationFlags = 0;
#else
        DWORD creationFlags = CREATE_NO_WINDOW;
#endif
 
        if (!CreateProcessA(
            NULL,   // No module name (use command line)
            (LPSTR)cmdStr.c_str(),  // Command line
            NULL,   // Process handle not inheritable
            NULL,   // Thread handle not inheritable
            FALSE,  // Set handle inheritance to FALSE
            creationFlags,      // No creation flags
            NULL,   // Use parent's environment block
            NULL,   // Use parent's starting directory
            &startupInfo,    // Pointer to STARTUPINFO structure
            &processInformation)    // Pointer to PROCESS_INFORMATION structure
            )
        {
            //string message = format("Failed to create process for {} extensibility: {}", m_extensibilityListName[i], GetLastError());
            //LogErrorMessage(message);
            //DWORD errMsg = GetLastError();
            return CONTAINER_START;
        }
    }
 
    return PANO_SUCCESS;
}

References BuildContainerCommandLine(), CONTAINER_START, EXT_SELECTED, and PANO_SUCCESS.

Referenced by WinMain().