UnicodeDecodeError - Capa v1.6.0
See original GitHub issueHi!
In the last release (v1.16.0) I am getting the error message below when I run capa.exe on files with extension โ.dll_โ. This behavior does not occur in version v1.15.0.
- In version v1.15.0 everything happens normally:
D:\Johnk3r\Tools\capa>capa.exe c:\Temp\offreg\ee8daedce51559f8e7f27a667f114d32.dll_
loading : 100%|##########| 458/458 [00:00<00:00, 1103.61 rules/s]
matching: 6%|5 | 409/7044 [00:25<06:56, 15.92 functions/s]
- In version v1.16.0 I have the following error:
D:\Johnk3r\Tools\capa>capa_new.exe c:\Temp\offreg\ee8daedce51559f8e7f27a667f114d32.dll_
loading : 100%|โโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโโ| 469/469 [00:00<00:00, 1240.61 rules/s]
Traceback (most recent call last):
File "main.py", line 812, in <module>
File "main.py", line 707, in main
File "main.py", line 346, in get_extractor
File "main.py", line 329, in get_extractor_py3
File "main.py", line 278, in get_workspace
File "viv_utils\__init__.py", line 80, in getWorkspace
File "vivisect\__init__.py", line 262, in loadWorkspace
File "vivisect\storage\basicfile.py", line 57, in loadWorkspace
File "vivisect\storage\basicfile.py", line 47, in vivEventsFromFile
UnicodeDecodeError: 'ascii' codec can't decode byte 0x90 in position 2: ordinal not in range(128)
[4072] Failed to execute script main
Tk.
Issue Analytics
- State:
- Created 3 years ago
- Comments:8 (3 by maintainers)
Top Results From Across the Web
capa/CHANGELOG.md at master ยท mandiant/capa - GitHub
The FLARE team's open-source tool to identify capabilities in executable files. - capa/CHANGELOG.md at master ยท mandiant/capa.
Read more >Automated Malware Analysis Report for capa.exe - Joe Sandbox
capa.exe, 6%, Virustotal, Browse ... winEXE@6/685@0/0 ... <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">.
Read more >Diff - platform/prebuilts/build-tools - Google Git
+ +Starting with Python 3.8.6, examples, recipes, and other code in +the documentation are dual licensed under the PSF License Version 2ย ...
Read more >Matplotlib - The University of Texas at Austin
matplotlib is a library for making 2D plots of arrays in Python. Although it has its origins in emulating the. MATLABยฎ 1 graphics...
Read more >pgAdmin 4 Documentation
Ensure that your password is an adequate length; 6 characters should be the absolute ... Issue #2452 - Install pgadmin4-v1 1.5 on Centos7....
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
I have created a PR in viv-utils to provide a better exception, as in viv utils we can ensure we only raise this exception when loading a
.viv
file easily: https://github.com/williballenthin/viv-utils/pull/16There is also a PR to update the CHANGELOG/release notes: https://github.com/fireeye/capa/pull/475
can you confirm that there are not any related
*.viv
files in that directory? if so, can you delete them and try again?the underlying vivisect workspace format is not compatible across py2/py3, and weโve missed this issue in the update to py3.