hatching / vmcloak

Automated Virtual Machine Generation and Cloaking for Cuckoo Sandbox.
483 stars 120 forks source link

VMCloak Install: AttributeError: PE instance has no attribute 'FILE_HEADER' #145

Closed 0xThiebaut closed 5 years ago

0xThiebaut commented 5 years ago

While executing vmcloak install -r Windows_10_x86 I obtain the following stack trace:

Traceback (most recent call last):
  File \"/usr/bin/vmcloak\", line 11, in <module>
    load_entry_point('VMCloak==0.4.6', 'console_scripts', 'vmcloak')()
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/click-6.6-py2.7.egg/click/core.py\", line 716, in __call__
    return self.main(*args, **kwargs)
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/click-6.6-py2.7.egg/click/core.py\", line 696, in main
    rv = self.invoke(ctx)
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/click-6.6-py2.7.egg/click/core.py\", line 1060, in invoke
    return _process_result(sub_ctx.command.invoke(sub_ctx))
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/click-6.6-py2.7.egg/click/core.py\", line 889, in invoke
    return ctx.invoke(self.callback, **ctx.params)
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/click-6.6-py2.7.egg/click/core.py\", line 534, in invoke
    return callback(*args, **kwargs)
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/VMCloak-0.4.6-py2.7.egg/vmcloak/main.py\", line 407, in install
    d(h, m, a, image, version, settings).run()
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/VMCloak-0.4.6-py2.7.egg/vmcloak/dependencies/zer0m0n.py\", line 135, in run
    winload = self.patch_winload(winload)
  File \"/usr/lib/vmcloak/lib/python2.7/site-packages/VMCloak-0.4.6-py2.7.egg/vmcloak/dependencies/zer0m0n.py\", line 34, in patch_winload
    if pe1.FILE_HEADER.TimeDateStamp not in self.winload:
AttributeError: PE instance has no attribute 'FILE_HEADER'

Any idea what may cause this?

0xThiebaut commented 5 years ago

Closing as the issue doesn't occur anymore.