Penetrum-Security / Maltree-Issue-Repo

Issues that are presented to Malcore and Malnet
https://penetrum.com/upload
3 stars 2 forks source link

Maltree Dev Issue (c8ad400f39ae66a) #3230

Closed Penetrum-Security closed 3 years ago

Penetrum-Security commented 3 years ago

Python version 2.718 Traceback:

Traceback (most recent call):
  File "C:\Users\rando\bin\python\maltree\entry\main.py", line 304, in main
    imports_processed=imports
  File "C:\Users\rando\bin\python\maltree\lib\settings.py", line 1899, in threat_score_generation_pointer
    imports_processed = get_exports_and_imports(filename, use_fallback=True)
  File "C:\Users\rando\bin\python\maltree\lib\settings.py", line 694, in get_exports_and_imports
    data = algorithms.backup_extraction.backup_imports_exports(filename)
  File "C:\Users\rando\bin\python\maltree\algorithms\backup_extraction.py", line 65, in backup_imports_exports
    with open(filename, "rw+b") as f:
Invalid mode ('rw+b')

Running platform: Windows-10-10.0.19041 Last 30 lines of log file:

[DEBUG][MALCORE][Sun May 16 14:01:46 2021] total of 0 similar hashes to passed file
[DEBUG][MALCORE][Sun May 16 14:01:46 2021] testing against yara rules first to determine packer [REDACTED]
[DEBUG][MALCORE][Sun May 16 14:01:46 2021] loading yara rules to determine packers
[INFO][MALCORE][Sun May 16 14:01:46 2021] found 3 match(es) for potential packers
[DEBUG][MALCORE][Sun May 16 14:01:46 2021] failed to process pcap [REDACTED], was dynamic analysis skipped? ([REDACTED]==True for debugging purposes)
[DEBUG][MALCORE][Sun May 16 14:01:46 2021] failed to gather imports [REDACTED] using just backup method
[DEBUG][MALCORE][Sun May 16 14:01:46 2021] skipping [REDACTED] else and using fallback method for [REDACTED]
[FATAL][MALCORE][Sun May 16 14:01:46 2021] received exception from run: 
Traceback (most recent call):
  File "C:\Users\rando\bin\python\maltree\entry\main.py", line 304, in main
    imports_processed=imports
  File "C:\Users\rando\bin\python\maltree\lib\settings.py", line 1899, in threat_score_[REDACTED]_pointer
    imports_processed = get_exports_and_imports(filename, use_fallback=True)
  File "C:\Users\rando\bin\python\maltree\lib\settings.py", line 694, in get_exports_and_imports
    data = [REDACTED].backup_[REDACTED].backup_imports_exports(filename)
  File "C:\Users\rando\bin\python\maltree\[REDACTED]\backup_[REDACTED].py", line 65, in backup_imports_exports
    with open(filename, "rw+b") as f:
Invalid mode ('rw+b')
[ERROR][MALCORE][Sun May 16 14:01:46 2021] creating issue with the title: Maltree Dev Issue ([REDACTED]) and the body
Traceback (most recent call):
  File "C:\Users\rando\bin\python\maltree\entry\main.py", line 304, in main
    imports_processed=imports
  File "C:\Users\rando\bin\python\maltree\lib\settings.py", line 1899, in threat_score_[REDACTED]_pointer
    imports_processed = get_exports_and_imports(filename, use_fallback=True)
  File "C:\Users\rando\bin\python\maltree\lib\settings.py", line 694, in get_exports_and_imports
    data = [REDACTED].backup_[REDACTED].backup_imports_exports(filename)
  File "C:\Users\rando\bin\python\maltree\[REDACTED]\backup_[REDACTED].py", line 65, in backup_imports_exports
    with open(filename, "rw+b") as f:
Invalid mode ('rw+b')
Ekultek commented 3 years ago

fixed