Error running capa on `IDA`
See original GitHub issueDescription
Got the following error:
ERROR:capa.ida.plugin.form:Failed to render results (error: unexpected rule scope: Scope.INSTRUCTION)
Traceback (most recent call last):
File "C:\Users\Rony\AppData\Local\Programs\Python\Python39\lib\site-packages\capa\ida\plugin\form.py", line 825, in load_capa_results
self.model_data.render_capa_doc(self.doc, self.view_show_results_by_function.isChecked())
File "C:\Users\Rony\AppData\Local\Programs\Python\Python39\lib\site-packages\capa\ida\plugin\model.py", line 512, in render_capa_doc
self.render_capa_doc_by_program(doc)
File "C:\Users\Rony\AppData\Local\Programs\Python\Python39\lib\site-packages\capa\ida\plugin\model.py", line 497, in render_capa_doc_by_program
raise RuntimeError("unexpected rule scope: " + str(rule.meta.scope))
RuntimeError: unexpected rule scope: Scope.INSTRUCTION
INFO:capa.ida.plugin.form:Analysis failed.
Steps to Reproduce
- Load any binary in
IDA
. - Run
capa explorer
plugin - Get the following error :
See
description
Expected behavior:
Capa should render the results correctly and display the result in IDA
.
Actual behavior:
See description
Versions
capa 4.0.1
IDA Pro 7.6
Python 3.9
Issue Analytics
- State:
- Created a year ago
- Comments:14 (3 by maintainers)
Top Results From Across the Web
pip installation and IDA plugin instructions fail to install properly
This succeeded and capa can then be imported in Python. Then opening IDA and attempting to run main.py via run script errors with...
Read more >capa 2.0: Better, Stronger, Faster - Mandiant
When a user upgrades to capa 2.0, they'll see that the tool runs faster and provides more precise results. Signature Generation. To provide...
Read more >capa v4.0.1 releases: identify capabilities in executable files
Run capa/main.py via File - Script file... (or ALT + F7). When running in IDA, capa uses IDA's disassembly and file analysis as...
Read more >flare-capa - PyPI
pip install flare-capa ... check for OutputDebugString error | anti-analysis/anti-debugging/debugger-detection | | read and ... capa + IDA Pro integration ...
Read more >capa: Automatically Identify Malware Capabilities w ... - YouTube
Effective analysts are those that understand and prioritize files of interest during an incident response. However, understanding if a ...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Ah, just double-checked. It worked. Thanks for the quick fixes @mr-tz, as always.
Does your
model.py
not containCapaExplorerDataModel
?