Cisco-Talos / CASC

GNU General Public License v2.0
43 stars 16 forks source link

not able to disassemble correctly #8

Closed etacheau closed 7 years ago

etacheau commented 7 years ago

While working on a new malware, it's not able to provide disassembly correctly. sha256 of the malware: 1f63371f2b2a5f340ea3c4d211b1fe0d6197e3a00e87cae49e873ae8964e8810

bug1 bug2

demonduck commented 7 years ago

This is due to the way the Assembly is derived from the binary. This is occurring since the highlighted code is not part of a function. I'll look into if it is possible to change this behavior.

demonduck commented 7 years ago

The dev branch has a fix for this issue, please test it out and reopen this issue to report any issues you encounter.