question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. Itย collects links to all the places you might be looking at while hunting down a tough bug.

And, if youโ€™re still stuck at the end, weโ€™re happy to hop on a call to see how we can help out.

UnicodeDecodeError - Capa v1.6.0

See original GitHub issue

Hi!

In the last release (v1.16.0) I am getting the error message below when I run capa.exe on files with extension โ€œ.dll_โ€. This behavior does not occur in version v1.15.0.

  • In version v1.15.0 everything happens normally:
D:\Johnk3r\Tools\capa>capa.exe c:\Temp\offreg\ee8daedce51559f8e7f27a667f114d32.dll_  
loading : 100%|##########| 458/458 [00:00<00:00, 1103.61     rules/s]
matching:   6%|5         | 409/7044 [00:25<06:56, 15.92 functions/s]
  • In version v1.16.0 I have the following error:
D:\Johnk3r\Tools\capa>capa_new.exe c:\Temp\offreg\ee8daedce51559f8e7f27a667f114d32.dll_
loading : 100%|โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆ| 469/469 [00:00<00:00, 1240.61     rules/s]
Traceback (most recent call last):
  File "main.py", line 812, in <module>
  File "main.py", line 707, in main
  File "main.py", line 346, in get_extractor
  File "main.py", line 329, in get_extractor_py3
  File "main.py", line 278, in get_workspace
  File "viv_utils\__init__.py", line 80, in getWorkspace
  File "vivisect\__init__.py", line 262, in loadWorkspace
  File "vivisect\storage\basicfile.py", line 57, in loadWorkspace
  File "vivisect\storage\basicfile.py", line 47, in vivEventsFromFile
UnicodeDecodeError: 'ascii' codec can't decode byte 0x90 in position 2: ordinal not in range(128)
[4072] Failed to execute script main

Tk.

Issue Analytics

  • State:closed
  • Created 3 years ago
  • Comments:8 (3 by maintainers)

github_iconTop GitHub Comments

2reactions
Ana06commented, Mar 12, 2021

I have created a PR in viv-utils to provide a better exception, as in viv utils we can ensure we only raise this exception when loading a .viv file easily: https://github.com/williballenthin/viv-utils/pull/16

There is also a PR to update the CHANGELOG/release notes: https://github.com/fireeye/capa/pull/475

2reactions
williballenthincommented, Mar 11, 2021

can you confirm that there are not any related *.viv files in that directory? if so, can you delete them and try again?

the underlying vivisect workspace format is not compatible across py2/py3, and weโ€™ve missed this issue in the update to py3.

Read more comments on GitHub >

github_iconTop Results From Across the Web

capa/CHANGELOG.md at master ยท mandiant/capa - GitHub
The FLARE team's open-source tool to identify capabilities in executable files. - capa/CHANGELOG.md at master ยท mandiant/capa.
Read more >
Automated Malware Analysis Report for capa.exe - Joe Sandbox
capa.exe, 6%, Virustotal, Browse ... winEXE@6/685@0/0 ... <assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">.
Read more >
Diff - platform/prebuilts/build-tools - Google Git
+ +Starting with Python 3.8.6, examples, recipes, and other code in +the documentation are dual licensed under the PSF License Version 2ย ...
Read more >
Matplotlib - The University of Texas at Austin
matplotlib is a library for making 2D plots of arrays in Python. Although it has its origins in emulating the. MATLABยฎ 1 graphics...
Read more >
pgAdmin 4 Documentation
Ensure that your password is an adequate length; 6 characters should be the absolute ... Issue #2452 - Install pgadmin4-v1 1.5 on Centos7....
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found