Apr4h / CobaltStrikeScan

Scan files or process memory for CobaltStrike beacons and parse their configuration
MIT License
900 stars 114 forks source link

"libyaraNET" Missing #9

Closed Salmonhunter5000 closed 3 years ago

Salmonhunter5000 commented 3 years ago

Hi, I am having difficulties creating the program with msbuild. I get the error message that when CobaltStrikeConfigParser.csproj is created, "libyaraNET" cannot be found. The process is then canceled. What do I have to install so that the creation of the program works.

I'm using a Windows 10 system with Visual Studio Build Tools 2019 (Version 16.9.4) and .NET Framework Versions 4-4.6.1

Salmonhunter5000 commented 3 years ago

Sorry found the error myself...

theonlykernel commented 3 years ago

@Apr4h I have this same issue - what is the solution?

Apr4h commented 3 years ago

@Apr4h I have this same issue - what is the solution?

If you have the solution open in Visual Studio, make sure you have an x64 build option selected rather than 'Any CPU' as LibYara.NET is only 64bit. Otherwise you will probably need to manually edit the solution / project files to ensure that you're building as x64 rather than 'Any CPIU'. That should fix your issue but let me know if it doesn't.

dimante commented 3 years ago

I had to go get the libyara.net dll to get this to work. It seems its missing form your project.

theonlykernel commented 3 years ago

@dimante same situation here.

@Apr4h can you update the release to include the libtaraNET dll? I'm not compiling from source but had to install it via the dotnet CLI.

Thx!

Apr4h commented 3 years ago

Thanks for the info. Hopefully the most recent commit: 42874a61baeddc1134110b9238b771aed14b73c1 should fix the issue.

theonlykernel commented 3 years ago

Thanks for the info. Hopefully the most recent commit: 42874a6 should fix the issue.

thanks, will releases be updated soon?