search

cuckoosandbox / cuckoo

Cuckoo Sandbox is an automated dynamic malware analysis system
http://www.cuckoosandbox.org
Other
5.55k stars 1.71k forks source link

Can not analyse the sample which has a chinese file name #1049

Closed jackleexp closed 7 years ago

jackleexp commented 8 years ago

When i submit a sample which has a chinese file name. the cuckoo show me the error:The package "modules.packages.exe" start function raised an error: Unable to execute the initial process, analysis aborted. My os in vm is windowsxp chinese version. Is that inject-x86.exe can not handle the unicode charset?

jackleexp commented 8 years ago

Anybody knows the reason?

doomedraven commented 8 years ago

no idea, but yes can be what is the unicode problem, try debug it and send patch :) or more details at least

jbremer commented 8 years ago

Can you share the filename of your sample? That way I'll be able to test some more.

jackleexp commented 8 years ago

the file name is "病毒.exe"。you can rename any executable file to this name, then try it.

jackleexp commented 8 years ago

can anybody know the reason?

gugronnier commented 8 years ago

for me there is no problem. i take a standard executable file, i rename it "病毒.exe" and i put it in my cuckoosand box (version Cuckoo Sandbox 2.0-dev || VM : windows SP1 x64 french)

kevross33 commented 8 years ago

I think I have submitted an issue along the same lines: https://github.com/cuckoosandbox/cuckoo/issues/1080

jbremer commented 7 years ago

Yes, definitely the same issue @kevross33. Going to close this one as a duplicate. I need to fix it still, though.