search

decalage2 / ViperMonkey

A VBA parser and emulation engine to analyze malicious macros.
1.05k stars 185 forks source link

Eval error #13

Closed tbearden closed 7 years ago

tbearden commented 7 years ago

When running against the sample here (http://pastebin.com/7Pp2p7Yg), I get the below error. I have tried against several different samples, and always get the same result.

EVALUATED VBA EXPRESSIONS: Traceback (most recent call last): File "./vmonkey.py", line 215, in process_file_scanexpr for expression, expr_eval in scan_expressions(all_code): File "/home/tbearden/bin/tools/malware/ViperMonkey/vipermonkey/core/init.py", line 205, in scan_expressions yield (e, e.eval()) TypeError: eval() takes at least 2 arguments (1 given)

Am I missing some requirement? or just running through weird samples?

tbearden commented 7 years ago

Looks like it bombs when it tries to process lines like 'IE8BaR = 176735 + 3265'

decalage2 commented 7 years ago

scan_expressions was quite old code that I hadn't used for a while. It should be fixed now. Could you please test your code and tell me if it works?

tbearden commented 7 years ago

Looks like that fixed it. Thanks