Problem with ursnifscan

JPCERTCC / MalConfScan

Volatility plugin for extracts configuration data of known malware

Other

485 stars 67 forks source link

Problem with ursnifscan #4

Closed serosero closed 5 years ago

serosero commented 5 years ago

I tried MalConfScan-with-Cuckoo with the sample page ursnif. SHA256: 0207c06879fb4a2ddaffecc3a6713f2605cbdd90fc238da9845e88ff6aef3f85 But, I am troubled with an error.

File "/home/name/venv/local/lib/python2.7/site-packages/volatility-2.6.1-py2.7.egg/volatility/plugins/malware/utils/ursnifscan.py", line 245, in calculate parse_joinned_data(fname, magic) NameError: global name 'parse_joinned_data' is not defined

shu-tom commented 5 years ago

I have fixed the bug, please retry.

serosero commented 5 years ago

Thanks for the quick fix! It's working.