search

idanr1986 / cuckoo-droid

CuckooDroid - Automated Android Malware Analysis with Cuckoo Sandbox.
577 stars 135 forks source link

Analysis failed: The package "modules.packages.apk" start function raised an error: failed to execute sample on emulator:Error type 3 #30

Closed lovina37 closed 5 years ago

lovina37 commented 7 years ago

image

lovina37 commented 7 years ago

lovina@lovina-VirtualBox:~/Downloads/cuckoo$ python cuckoo.py

        _       _                   _             _              _            _       
      /\ \     /\_\               /\ \           /\_\           /\ \         /\ \     
     /  \ \   / / /         _    /  \ \         / / /  _       /  \ \       /  \ \    
    / /\ \ \  \ \ \__      /\_\ / /\ \ \       / / /  /\_\    / /\ \ \     / /\ \ \   
   / / /\ \ \  \ \___\    / / // / /\ \ \     / / /__/ / /   / / /\ \ \   / / /\ \ \  
  / / /  \ \_\  \__  /   / / // / /  \ \_\   / /\_____/ /   / / /  \ \_\ / / /  \ \_\ 
 / / /    \/_/  / / /   / / // / /    \/_/  / /\_______/   / / /   / / // / /   / / / 
/ / /          / / /   / / // / /          / / /\ \ \     / / /   / / // / /   / / /

/ / /____ / / // / // / /____ / / / \ \ \ / / // / // / /_/ / /
/ / /___\/ / /\/ // / /\/ / / \ \ \ / / /\/ // / /\/ /
\/____/\// \/____/\// __\/____/ \/_____/

Cuckoo Sandbox 2.0-rc2 www.cuckoosandbox.org Copyright (c) 2010-2015

Checking for updates... Good! You have the latest version available.

2017-02-24 16:41:30,587 [root] CRITICAL: CuckooCriticalError: Unable to import plugin "modules.processing.apkinfo": cannot import name PathVar

liranfar commented 7 years ago

Try shortening the file name, it worked for me

lovina37 commented 7 years ago

lovina@lovina-Aspire-E1-571:~/Downloads/cuckoo$ python cuckoo.py

                      .:                 
                      ::                 
.-.     ,  :   .-.    ;;.-.  .-.   .-.

; ; ; ; ;; .' ; ;'; ;' ;;;;'.'..:;.`;;;;'.'`.;;' `;;'

Cuckoo Sandbox 1.2 www.cuckoosandbox.org Copyright (c) 2010-2015

/usr/local/lib/python2.7/dist-packages/sqlalchemy/sql/compiler.py:572: SAWarning: Can't resolve label reference 'added_on desc'; converting to text() (this warning may be suppressed after 10 occurrences) util.ellipses_string(element.element)) 2017-02-25 21:20:06,394 [lib.cuckoo.core.scheduler] INFO: Using "virtualbox" machine manager 2017-02-25 21:20:06,979 [lib.cuckoo.core.scheduler] INFO: Loaded 1 machine/s 2017-02-25 21:20:07,004 [lib.cuckoo.core.scheduler] INFO: Waiting for analysis tasks. /usr/local/lib/python2.7/dist-packages/sqlalchemy/sql/compiler.py:572: SAWarning: Can't resolve label reference 'priority desc, added_on'; converting to text() (this warning may be suppressed after 10 occurrences) util.ellipses_string(element.element)) 2017-02-25 21:20:43,282 [lib.cuckoo.core.scheduler] INFO: Starting analysis of FILE "/tmp/cuckoo-tmp/upload_8o1MFL/2.apk" (task=14) 2017-02-25 21:20:43,409 [lib.cuckoo.core.scheduler] INFO: Task #14: acquired machine cuckoo2 (label=cuckoo2) 2017-02-25 21:20:43,419 [modules.auxiliary.sniffer] INFO: Started sniffer with PID 5562 (interface=vboxnet0, host=192.168.56.101, dump path=/home/lovina/Downloads/cuckoo/storage/analyses/14/dump.pcap) 2017-02-25 21:21:02,405 [lib.cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo2, ip=192.168.56.101) 2017-02-25 21:23:30,734 [lib.cuckoo.core.guest] INFO: cuckoo2: analysis completed successfully 2017-02-25 21:23:33,044 [modules.processing.apkinfo] WARNING: Dex size bigger than: None 2017-02-25 21:23:33,047 [modules.processing.behavior] INFO: Analysis results folder does not contain any file or injection was disabled. 2017-02-25 21:23:33,094 [requests.packages.urllib3.connectionpool] INFO: Starting new HTTPS connection (1): android.clients.google.com /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/connectionpool.py:768: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html InsecureRequestWarning) 2017-02-25 21:23:33,581 [requests.packages.urllib3.connectionpool] INFO: Starting new HTTPS connection (1): android.clients.google.com /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/connectionpool.py:768: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html InsecureRequestWarning) 2017-02-25 21:23:34,040 [lib.cuckoo.core.plugins] ERROR: Failed to run the processing module "NetworkAnalysis": Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/lib/cuckoo/core/plugins.py", line 186, in process data = current.run() File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 593, in run sort_pcap(self.pcap_path, sorted_path) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 708, in sort_pcap batch_sort(inc, outpath, output_class=lambda path: SortCap(path, linktype=inc.linktype)) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 635, in batch_sort current_chunk = list(islice(input_iterator,buffer_size)) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 677, in iter self.fd = dpkt.pcap.Reader(open(self.name, "rb")) IOError: [Errno 2] No such file or directory: '/home/lovina/Downloads/cuckoo/storage/analyses/14/dump.pcap' 2017-02-25 21:23:34,731 [lib.cuckoo.core.plugins] ERROR: Failed to run signature "network_http": Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/lib/cuckoo/core/plugins.py", line 342, in process if current.run(): File "/home/lovina/Downloads/cuckoo/modules/signatures/network_http.py", line 27, in run if "http" in self.results["network"]: KeyError: 'network' 2017-02-25 21:23:34,732 [lib.cuckoo.core.plugins] ERROR: Failed to run signature "network_icmp": Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/lib/cuckoo/core/plugins.py", line 342, in process if current.run(): File "/home/lovina/Downloads/cuckoo/modules/signatures/network_icmp.py", line 27, in run if "icmp" in self.results["network"]: KeyError: 'network' 2017-02-25 21:23:34,733 [lib.cuckoo.core.plugins] ERROR: Failed to run signature "network_irc": Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/lib/cuckoo/core/plugins.py", line 342, in process if current.run(): File "/home/lovina/Downloads/cuckoo/modules/signatures/network_irc.py", line 27, in run if "irc" in self.results["network"]: KeyError: 'network' 2017-02-25 21:23:34,734 [lib.cuckoo.core.plugins] ERROR: Failed to run signature "network_smtp": Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/lib/cuckoo/core/plugins.py", line 342, in process if current.run(): File "/home/lovina/Downloads/cuckoo/modules/signatures/network_smtp.py", line 27, in run if "smtp" in self.results["network"]: KeyError: 'network' 2017-02-25 21:23:35,607 [lib.cuckoo.core.scheduler] INFO: Task #14: reports generation completed (path=/home/lovina/Downloads/cuckoo/storage/analyses/14) 2017-02-25 21:23:35,710 [lib.cuckoo.core.scheduler] WARNING: Error pointing latest analysis symlink: [Errno 17] File exists 2017-02-25 21:23:35,710 [lib.cuckoo.core.scheduler] INFO: Task #14: analysis procedure completed

lovina37 commented 7 years ago

why do u think network analysis fails ?? also do u have anm example of report of api analysis because I am not getting API accessed by the application only viurs total result

lovina37 commented 7 years ago

@liranfar @jbremer @idanr1986 @ofercas

I got everything working submitted the apk then even analysis started and almost everything is happening like the apk installing the browser starting but still I get no proper analysis result.

My analysis report has nothing no static analysis nothing can you make out anything from this screenshot.

Please suggest something as I want cuckoodroid to work on my system.

image

image

liranfar commented 7 years ago

in order to get dynamic analysis result you must ensure that the emulator is running correctly with the necessary services ( droidmon sends api calls back to the host) try run cuckoo(the host) in debug mode(-d) and let us see the results

lovina37 commented 7 years ago

@liranfar @jbremer @idanr1986 @ofercas

I get this result for debug.

2017-03-04 18:35:57,369 [lib.cuckoo.core.guest] DEBUG: cuckoo2: analysis not completed yet (status=2) 2017-03-04 18:35:57,688 [lib.cuckoo.core.resultserver] DEBUG: File upload request for logs/droidmon.log 2017-03-04 18:35:57,689 [lib.cuckoo.core.resultserver] DEBUG: Connection closed: 192.168.56.101:55506 2017-03-04 18:35:57,693 [lib.cuckoo.core.resultserver] DEBUG: File upload request for logs/droidmon_error.log 2017-03-04 18:35:57,693 [lib.cuckoo.core.resultserver] DEBUG: Connection closed: 192.168.56.101:55508 2017-03-04 18:35:58,382 [lib.cuckoo.core.guest] INFO: cuckoo2: analysis completed successfully 2017-03-04 18:35:58,450 [lib.cuckoo.core.plugins] DEBUG: Stopped auxiliary module: MITM 2017-03-04 18:35:58,450 [lib.cuckoo.core.plugins] DEBUG: Stopped auxiliary module: Sniffer 56 packets captured 56 packets received by filter 0 packets dropped by kernel 2017-03-04 18:36:57,701 [modules.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label cuckoo2 to path /home/lovina/Downloads/cuckoo/storage/analyses/12/memory.dmp 2017-03-04 18:36:57,799 [modules.machinery.virtualbox] DEBUG: Stopping vm cuckoo2 2017-03-04 18:36:57,800 [modules.machinery.virtualbox] DEBUG: Getting status for cuckoo2 2017-03-04 18:37:00,471 [modules.machinery.virtualbox] DEBUG: Machine cuckoo2 status running 2017-03-04 18:37:02,861 [modules.machinery.virtualbox] DEBUG: Getting status for cuckoo2 2017-03-04 18:37:03,019 [modules.machinery.virtualbox] DEBUG: Machine cuckoo2 status poweroff 2017-03-04 18:37:03,765 [lib.cuckoo.core.resultserver] DEBUG: Connection closed: 192.168.56.101:50468 2017-03-04 18:37:04,176 [lib.cuckoo.core.scheduler] DEBUG: Released database task #12 2017-03-04 18:37:04,722 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "AnalysisInfo" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:06,461 [modules.processing.apkinfo] WARNING: Dex size bigger than: None 2017-03-04 18:37:06,462 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "ApkInfo" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:06,504 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "BehaviorAnalysis" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:06,534 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "DroppedBuffer" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:06,596 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Debug" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:06,619 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Droidmon" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:06,659 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Dropped" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/connectionpool.py:768: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html InsecureRequestWarning) /usr/local/lib/python2.7/dist-packages/requests/packages/urllib3/connectionpool.py:768: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html InsecureRequestWarning) 2017-03-04 18:37:08,560 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "GooglePlay" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:08,564 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "ProcessMemory" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:08,596 [modules.processing.screenshots] ERROR: Could not find tesseract binary, screenshot OCR aborted. 2017-03-04 18:37:08,600 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Screenshots" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:08,607 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Static" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:08,641 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Strings" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:08,781 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "TargetInfo" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:13,886 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:13,899 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:13,901 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:13,903 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:13,904 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:13,906 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:14,023 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:14,025 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:14,026 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:14,027 [modules.processing.network] ERROR: Failed to process packet: 'type' Traceback (most recent call last): File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 621, in run self._udp_dissect(connection, udp.data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 212, in _udp_dissect self._add_dns(data) File "/home/lovina/Downloads/cuckoo/modules/processing/network.py", line 351, in _add_dns reqtuple = query["type"], query["request"] KeyError: 'type' 2017-03-04 18:37:14,043 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "NetworkAnalysis" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:14,569 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "VirusTotal" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:14,570 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "TLSMasterSecrets" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12" 2017-03-04 18:37:14,574 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_AirPush_Adware. 2017-03-04 18:37:14,574 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_Umeng_Adware. 2017-03-04 18:37:14,575 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_antivirus_virustotal. 2017-03-04 18:37:14,575 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_antivirus_virustotal_threshold. 2017-03-04 18:37:14,575 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_dangerous_permissions. 2017-03-04 18:37:14,576 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_dynamic_code. 2017-03-04 18:37:14,576 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_google_play_diff. 2017-03-04 18:37:14,577 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_hidden_payload. 2017-03-04 18:37:14,577 [lib.cuckoo.core.plugins] WARNING: Cuckoo version 2.0 features a lot of changes that render old signatures ineffective as they are not backwards-compatible. Please upgrade this signature: android_maware_snadrorat. 2017-03-04 18:37:14,577 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_maware_androrat. 2017-03-04 18:37:14,578 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_maware_iBanking. 2017-03-04 18:37:14,578 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_native_code. 2017-03-04 18:37:14,579 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_packer. 2017-03-04 18:37:14,579 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: android_reflection_code. 2017-03-04 18:37:14,579 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_aborted_broadcast_receiver. 2017-03-04 18:37:14,580 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_contains_apk. 2017-03-04 18:37:14,580 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_contains_arm_binaries. 2017-03-04 18:37:14,581 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_contains_dex. 2017-03-04 18:37:14,581 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_contains_jar. 2017-03-04 18:37:14,581 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_contains_so. 2017-03-04 18:37:14,582 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_device_admin. 2017-03-04 18:37:14,582 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_dropped_dex. 2017-03-04 18:37:14,583 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_dropped_files. 2017-03-04 18:37:14,583 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_dropped_so. 2017-03-04 18:37:14,584 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_executed_shell_command. 2017-03-04 18:37:14,584 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_fingerprint. 2017-03-04 18:37:14,585 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_installed_app. 2017-03-04 18:37:14,585 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_queried_account_info. 2017-03-04 18:37:14,586 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_queried_installed_apps. 2017-03-04 18:37:14,586 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_queried_private_information. 2017-03-04 18:37:14,587 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_recording_audio. 2017-03-04 18:37:14,587 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_reflection. 2017-03-04 18:37:14,587 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_registered_receiver_runtime. 2017-03-04 18:37:14,588 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_root. 2017-03-04 18:37:14,588 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_sent_sms_messages. 2017-03-04 18:37:14,588 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_setComponentEnabledSetting. 2017-03-04 18:37:14,589 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_stopped_processes. 2017-03-04 18:37:14,589 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_uses_location. 2017-03-04 18:37:14,589 [lib.cuckoo.core.plugins] WARNING: Cuckoo signature style has been redesigned in cuckoo 1.2. This signature is not compatible: application_using_the_camera. 2017-03-04 18:37:14,592 [lib.cuckoo.core.plugins] WARNING: Cuckoo version 2.0 features a lot of changes that render old signatures ineffective as they are not backwards-compatible. Please upgrade this signature: network_http. 2017-03-04 18:37:14,593 [lib.cuckoo.core.plugins] WARNING: Cuckoo version 2.0 features a lot of changes that render old signatures ineffective as they are not backwards-compatible. Please upgrade this signature: network_icmp. 2017-03-04 18:37:14,593 [lib.cuckoo.core.plugins] WARNING: Cuckoo version 2.0 features a lot of changes that render old signatures ineffective as they are not backwards-compatible. Please upgrade this signature: network_irc. 2017-03-04 18:37:14,593 [lib.cuckoo.core.plugins] WARNING: Cuckoo version 2.0 features a lot of changes that render old signatures ineffective as they are not backwards-compatible. Please upgrade this signature: network_smtp. 2017-03-04 18:37:14,631 [lib.cuckoo.core.plugins] DEBUG: Running 419 signatures 2017-03-04 18:37:14,839 [lib.cuckoo.core.plugins] DEBUG: Analysis matched signature: antivirus_virustotal 2017-03-04 18:37:14,992 [lib.cuckoo.core.plugins] DEBUG: Executed reporting module "JsonDump" 2017-03-04 18:37:16,018 [lib.cuckoo.core.plugins] DEBUG: Executed reporting module "MongoDB" 2017-03-04 18:37:16,842 [lib.cuckoo.core.plugins] DEBUG: Executed reporting module "ReportAndroidHTML" 2017-03-04 18:37:16,842 [lib.cuckoo.core.scheduler] INFO: Task #12: reports generation completed (path=/home/lovina/Downloads/cuckoo/storage/analyses/12) 2017-03-04 18:37:16,924 [lib.cuckoo.core.scheduler] INFO: Task #12: analysis procedure completed

liranfar commented 7 years ago

did you check out this folder and searched for droidmon reports?

2017-03-04 18:37:06,619 [lib.cuckoo.core.plugins] DEBUG: Executed processing module "Droidmon" on analysis at "/home/lovina/Downloads/cuckoo/storage/analyses/12"

lovina37 commented 7 years ago

@liranfar There are only this many things no droidmon report. In html report I cnt see anything now like no behaviour or any thing image

image

image

image

image

lovina37 commented 7 years ago

@liranfar @jbremer @idanr1986 @ofercas

In logs I have this two logs but they are empty there is nothing in them.

image

lovina37 commented 7 years ago

@liranfar did you see the above post I don't know what to do ...

lovina37 commented 7 years ago

image

liranfar commented 7 years ago

besides repeating the emulator (guest) preparing process I don't have much ideas to suggest you. sorry

lovina37 commented 7 years ago

image

tappan-ajmera commented 6 years ago

Hi @lovina37 I am stuck at the issue of network analysis failure. Can you tell me how did you overcome that?

sanketh96 commented 6 years ago

Hi @lovina37 , so how were you able to resolve the following error:

[root] CRITICAL: CuckooCriticalError: Unable to import plugin "modules.processing.apkinfo": cannot import name PathVar I'm encountering the same error when trying to run the cuckoo.py file.

wickywaka commented 6 years ago

@sanketh96 This problem is related to androguard, Which version of androguard do you have? You need to have Androgaurd 1.9

wickywaka commented 6 years ago

You can download version 1.9 here https://github.com/androguard/androguard/releases/tag/1.9

sanketh96 commented 6 years ago

Thanks a lot!, that solved the issue, it was a great help. I'm encountering a problem when running the script manage.py, which is probably due to a different django version being used by cuckoo droid and what's on my local system. Do you know what is the django version being used in cuckoo droid?

On 23 April 2018 at 15:52, waqar rashid notifications@github.com wrote:

You can download version 1.9 here https://github.com/androguard/ androguard/releases/tag/1.9

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/idanr1986/cuckoo-droid/issues/30#issuecomment-383527485, or mute the thread https://github.com/notifications/unsubscribe-auth/AOeG7oAEXbv29Sec9VqxjiYES91NjvtGks5tratdgaJpZM4MKzH- .

wickywaka commented 6 years ago

I am working on a video tutorial for configuring cuckoodroid, so far only two videos are up, but I think that problem is solved in those videos, have a look at https://www.youtube.com/watch?v=mUoz71KfwLg&list=PLWHO6M8IznQBPzRlcrZ99LG0n4bktm0x8

sanketh96 commented 6 years ago

Thanks I'll have a look at that!

On Wed, 25 Apr 2018, 6:06 p.m. waqar rashid, notifications@github.com wrote:

I am working on a video tutorial for configuring cuckoodroid, so far only two videos are up, but I think that problem is solved in those videos, have a look at https://www.youtube.com/watch?v=mUoz71KfwLg&list=PLWHO6M8IznQBPzRlcrZ99LG0n4bktm0x8

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/idanr1986/cuckoo-droid/issues/30#issuecomment-384270909, or mute the thread https://github.com/notifications/unsubscribe-auth/AOeG7lotUqwLe2_mvxsBCQ5RQA1bYtKCks5tsG2zgaJpZM4MKzH- .

wickywaka commented 6 years ago

Just let me know here or on youtube if you are having any more trouble. I am working on a patch for CuckooDroid but I will need some help to verify those problems.

sssingh6555 commented 6 years ago

Hey everyone!! I need help from u guys.. In cuckoo droid it is not doing dynamic analysis. Static analysis is working perfectly... When I upload any file in cuckoo, my emulator starts but not able to do dynamic analysis as it shows device is not ready in terminal again and again.... Please help me!!! Have no idea what to do.

2018-05-15 20:58:36,343 [root] DEBUG: Importing modules... 2018-05-15 20:58:37,954 [root] INFO: Generating grammar tables from /usr/lib/python2.7/lib2to3/Grammar.txt 2018-05-15 20:58:37,991 [root] INFO: Generating grammar tables from /usr/lib/python2.7/lib2to3/PatternGrammar.txt 2018-05-15 20:58:38,339 [root] DEBUG: Imported "signatures" modules: 2018-05-15 20:58:38,340 [root] DEBUG: |-- AndroidDynamicCode 2018-05-15 20:58:38,340 [root] DEBUG: |-- AndroidDynamicCode 2018-05-15 20:58:38,340 [root] DEBUG: |-- KnownVirustotal 2018-05-15 20:58:38,340 [root] DEBUG: |-- KnownVirustotalThreshold 2018-05-15 20:58:38,340 [root] DEBUG: |-- AndroidDangerousPermissions 2018-05-15 20:58:38,340 [root] DEBUG: |-- AndroidDynamicCode 2018-05-15 20:58:38,340 [root] DEBUG: |-- AndroidGooglePlayDiff 2018-05-15 20:58:38,341 [root] DEBUG: |-- Hidden_Payload 2018-05-15 20:58:38,341 [root] DEBUG: |-- SandroRat 2018-05-15 20:58:38,341 [root] DEBUG: |-- AndroratMalware 2018-05-15 20:58:38,341 [root] DEBUG: |-- IBankingMalware 2018-05-15 20:58:38,341 [root] DEBUG: |-- AndroidNativeCode 2018-05-15 20:58:38,341 [root] DEBUG: |-- AndroidDynamicCode 2018-05-15 20:58:38,341 [root] DEBUG: |-- AndroidReflectionCode 2018-05-15 20:58:38,341 [root] DEBUG: |-- AndroidAbortBroadcast 2018-05-15 20:58:38,341 [root] DEBUG: |-- Hidden_Payload 2018-05-15 20:58:38,342 [root] DEBUG: |-- Hidden_Payload 2018-05-15 20:58:38,342 [root] DEBUG: |-- ApplicationContainsDex 2018-05-15 20:58:38,342 [root] DEBUG: |-- ApplicationContainsJar 2018-05-15 20:58:38,342 [root] DEBUG: |-- ApplicationContainsSo 2018-05-15 20:58:38,342 [root] DEBUG: |-- AndroidInstalledApps 2018-05-15 20:58:38,342 [root] DEBUG: |-- ApplicationDroppedDex 2018-05-15 20:58:38,342 [root] DEBUG: |-- ApplicationDroppedFiles 2018-05-15 20:58:38,342 [root] DEBUG: |-- ApplicationDroppedSo 2018-05-15 20:58:38,342 [root] DEBUG: |-- AndroidShellCommands 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidPhoneNumber 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidInstalledApps 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidAccountInfo 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidAppInfo 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidPrivateInfoQuery 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidAudio 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidUsingReflection 2018-05-15 20:58:38,343 [root] DEBUG: |-- AndroidRegisteredReceiver 2018-05-15 20:58:38,344 [root] DEBUG: |-- AndroidInstalledApps 2018-05-15 20:58:38,344 [root] DEBUG: |-- AndroidSMS 2018-05-15 20:58:38,344 [root] DEBUG: |-- AndroidComponentEnabledSetting 2018-05-15 20:58:38,344 [root] DEBUG: |-- AndroidStopProcess 2018-05-15 20:58:38,344 [root] DEBUG: |-- ApplicationUsesLocation 2018-05-15 20:58:38,344 [root] DEBUG: |-- AndroidCamera 2018-05-15 20:58:38,344 [root] DEBUG: |-- CreatesExe 2018-05-15 20:58:38,344 [root] DEBUG: |-- SystemMetrics 2018-05-15 20:58:38,344 [root] DEBUG: |-- NetworkHTTP 2018-05-15 20:58:38,345 [root] DEBUG: |-- NetworkICMP 2018-05-15 20:58:38,345 [root] DEBUG: |-- NetworkIRC 2018-05-15 20:58:38,345 [root] DEBUG: -- NetworkSMTP 2018-05-15 20:58:38,345 [root] DEBUG: Imported "processing" modules: 2018-05-15 20:58:38,345 [root] DEBUG: |-- AnalysisInfo 2018-05-15 20:58:38,345 [root] DEBUG: |-- ApkInfo 2018-05-15 20:58:38,345 [root] DEBUG: |-- BehaviorAnalysis 2018-05-15 20:58:38,345 [root] DEBUG: |-- Debug 2018-05-15 20:58:38,346 [root] DEBUG: |-- Droidmon 2018-05-15 20:58:38,346 [root] DEBUG: |-- Dropped 2018-05-15 20:58:38,346 [root] DEBUG: |-- GooglePlay 2018-05-15 20:58:38,346 [root] DEBUG: |-- Memory 2018-05-15 20:58:38,346 [root] DEBUG: |-- NetworkAnalysis 2018-05-15 20:58:38,346 [root] DEBUG: |-- ProcessMemory 2018-05-15 20:58:38,346 [root] DEBUG: |-- Static 2018-05-15 20:58:38,346 [root] DEBUG: |-- Strings 2018-05-15 20:58:38,346 [root] DEBUG: |-- TargetInfo 2018-05-15 20:58:38,347 [root] DEBUG:-- VirusTotal 2018-05-15 20:58:38,347 [root] DEBUG: Imported "auxiliary" modules: 2018-05-15 20:58:38,347 [root] DEBUG: -- Sniffer 2018-05-15 20:58:38,347 [root] DEBUG: Imported "reporting" modules: 2018-05-15 20:58:38,347 [root] DEBUG: |-- JsonDump 2018-05-15 20:58:38,347 [root] DEBUG: |-- MAEC40Report 2018-05-15 20:58:38,347 [root] DEBUG: |-- MMDef 2018-05-15 20:58:38,347 [root] DEBUG: |-- MongoDB 2018-05-15 20:58:38,347 [root] DEBUG: |-- ReportAndroidHTML 2018-05-15 20:58:38,348 [root] DEBUG:-- ReportHTML 2018-05-15 20:58:38,348 [root] DEBUG: Imported "machinery" modules: 2018-05-15 20:58:38,348 [root] DEBUG: -- Avd 2018-05-15 20:58:38,450 [root] DEBUG: Checking for locked tasks... /usr/local/lib/python2.7/dist-packages/sqlalchemy/sql/compiler.py:572: SAWarning: Can't resolve label reference 'added_on desc'; converting to text() (this warning may be suppressed after 10 occurrences) util.ellipses_string(element.element)) 2018-05-15 20:58:38,590 [root] INFO: Updated running task ID 7 status to failed_analysis 2018-05-15 20:58:38,590 [root] DEBUG: Initializing Yara... 2018-05-15 20:58:38,594 [root] DEBUG: |-- index_binaries.yar 2018-05-15 20:58:38,594 [root] DEBUG:-- index_memory.yar 2018-05-15 20:58:38,596 [lib.cuckoo.core.resultserver] DEBUG: ResultServer running on 127.0.0.1:2042. 2018-05-15 20:58:38,598 [lib.cuckoo.core.scheduler] INFO: Using "avd" machine manager 2018-05-15 20:58:38,698 [lib.cuckoo.core.scheduler] INFO: Loaded 1 machine/s 2018-05-15 20:58:38,711 [lib.cuckoo.core.scheduler] INFO: Waiting for analysis tasks. /usr/local/lib/python2.7/dist-packages/sqlalchemy/sql/compiler.py:572: SAWarning: Can't resolve label reference 'priority desc, added_on'; converting to text() (this warning may be suppressed after 10 occurrences) util.ellipses_string(element.element)) 2018-05-15 20:59:44,860 [lib.cuckoo.core.scheduler] DEBUG: Processing task #8 2018-05-15 20:59:44,862 [lib.cuckoo.core.scheduler] INFO: Starting analysis of FILE "/tmp/cuckoo-tmp/upload_RtiI1m/ContactManager.apk" (task=8) 2018-05-15 20:59:45,638 [lib.cuckoo.core.scheduler] INFO: File already exists at "/home/sarabpreet/cuckoo/storage/binaries/7370e929d3ea2ef8dd030b2b0e2a86ea4e0019a6de3d1dd6aec40b0752e01722" 2018-05-15 20:59:45,676 [lib.cuckoo.core.scheduler] INFO: Task #8: acquired machine aosx_1 (label=aosx_1) 2018-05-15 20:59:45,723 [modules.machinery.avd] DEBUG: Starting vm aosx_1 2018-05-15 20:59:45,723 [modules.machinery.avd] DEBUG: Duplicate Reference Machine 'aosx'. 2018-05-15 20:59:45,723 [modules.machinery.avd] DEBUG: Deleting old emulator config file '/home/sarabpreet/.android/avd/aosx_1.ini' 2018-05-15 20:59:45,726 [modules.machinery.avd] DEBUG: Deleting old emulator FS '/home/sarabpreet/.android/avd/aosx_1.avd/' 2018-05-15 20:59:45,735 [modules.machinery.avd] DEBUG: Copy AVD reference config file '/home/sarabpreet/.android/avd/aosx.ini' in '/home/sarabpreet/.android/avd/aosx_1.ini'... 2018-05-15 20:59:45,736 [modules.machinery.avd] DEBUG: Duplicate the AVD internal content from '/home/sarabpreet/.android/avd/aosx.avd/' in '/home/sarabpreet/.android/avd/aosx_1.avd/'... 2018-05-15 20:59:50,769 [modules.machinery.avd] DEBUG: Replacing 'aosx' with 'aosx_1' in '/home/sarabpreet/.android/avd/aosx_1.ini' 2018-05-15 20:59:50,770 [modules.machinery.avd] DEBUG: Replacing 'aosx' with 'aosx_1' in '/home/sarabpreet/.android/avd/aosx_1.avd/hardware-qemu.ini' 2018-05-15 21:00:00,785 [modules.machinery.avd] DEBUG: Restarting ADB server... 2018-05-15 21:00:00,953 [modules.machinery.avd] DEBUG: ADB server has been killed. 2018-05-15 21:00:04,069 [modules.machinery.avd] DEBUG: ADB server has been restarted. 2018-05-15 21:00:04,070 [modules.machinery.avd] DEBUG: Waiting for device emulator-5554 to be ready. 2018-05-15 21:00:56,125 [modules.machinery.avd] DEBUG: Waiting for the emulator to be ready 2018-05-15 21:00:56,125 [modules.machinery.avd] DEBUG: - (dev.bootcomplete) 2018-05-15 21:01:21,429 [modules.machinery.avd] DEBUG: - (sys_bootcomplete) 2018-05-15 21:01:21,538 [modules.machinery.avd] DEBUG: - (init.svc.bootanim) 2018-05-15 21:01:35,448 [modules.machinery.avd] DEBUG: Emulator emulator-5554 is ready ! 2018-05-15 21:01:35,472 [lib.cuckoo.core.guest] INFO: Starting analysis on guest (id=aosx_1, ip=127.0.0.1) 2018-05-15 21:01:35,472 [lib.cuckoo.core.guest] DEBUG: aosx_1: waiting for status 0x0001 2018-05-15 21:01:35,486 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:36,494 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:37,509 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:38,518 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:39,526 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:40,535 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:41,550 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:42,569 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:43,577 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:44,592 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:45,619 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:46,632 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:47,654 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:48,665 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet 2018-05-15 21:01:49,672 [lib.cuckoo.core.guest] DEBUG: aosx_1: not ready yet

This is the screenshot: cuc screenshot from 2018-5-15 20-47-58

gpalazolo commented 5 years ago

Hello @sssingh6555,

That happens because the web service is running in the same port as the agent within AVD (8000). So when the worker starts the communication with the agent, the requests goes to the web service, not to the agent (that's why you see all those 404).

Simple solution, just run the web service in another port, ex: python manager.py runserver 0.0.0.0:9000

Regards, Palazolo

cuckoo-linux commented 5 years ago

@waqarrashid33 I followed your repository https://github.com/waqarrashid33/cuckoo-droid.but getting following errors when i ran sandbox: test@test:~$ python cuckoo/cuckoo.py

//\ //\//\ //\ //\//\ //\ /_/\
\:::\/ \:\ \:\ \:::\/ \::.\ \ \ \::: \ \::: \ \
\:\ \ \:\ \:\ \:\ \ _\:: \/) \ \:\ \ \ \:\ \ \ \
\:\ \//\:\ \:\ \:\ \//\:. ( ( \:\ \ \ \:\ \ \ \
\:_\ \ \:_\:\ \:_\ \ \: \ ) \ \ \:_\ \ \:_\ \ \ _\/ _\/ _\/ _\/_\/ _\/ _____\/

Cuckoo Sandbox 1.2 www.cuckoosandbox.org Copyright (c) 2010-2015

Checking for updates... Outdated! Cuckoo Sandbox version 2.0.6 is available now.

2018-11-05 10:47:40,814 [root] CRITICAL: CuckooCriticalError: Unable to import plugin "modules.processing.apkinfo": cannot import name Analysis test@test:~$ cd cuckoo test@test:~/cuckoo$ pip install requirements.txt Collecting requirements.txt Could not find a version that satisfies the requirement requirements.txt (from versions: ) No matching distribution found for requirements.txt cuckoo latest version is working fine with me for windows and linux.

cuckoo-linux commented 5 years ago

when i tried to install androguard manually.i got following errors test@test:~/androguard-1.9$ pip install .[magic] Processing /home/test/androguard-1.9 androguard 1.5 does not provide the extra 'magic' Collecting distribute (from androguard==1.5) Downloading https://files.pythonhosted.org/packages/5f/ad/1fde06877a8d7d5c9b60eff7de2d452f639916ae1d48f0b8f97bf97e570a/distribute-0.7.3.zip (145kB) 100% |████████████████████████████████| 153kB 206kB/s Requirement already satisfied: setuptools>=0.7 in /usr/local/lib/python2.7/dist-packages (from distribute->androguard==1.5) (39.2.0) Building wheels for collected packages: androguard, distribute Running setup.py bdist_wheel for androguard ... done Stored in directory: /home/test/.cache/pip/wheels/0c/12/4b/e4bef05bb08db569f500044b3cedce52c08db3088097cd5c2e Running setup.py bdist_wheel for distribute ... done Stored in directory: /home/test/.cache/pip/wheels/22/45/4f/a227f4774c4c267bc87adeb85aba7eebd2ead6df647a574842 Successfully built androguard distribute cuckoo 2.0.6.2 has requirement androguard==3.0.1, but you'll have androguard 1.5 which is incompatible. cuckoo 2.0.6.2 has requirement yara-python==3.6.3, but you'll have yara-python 3.8.1 which is incompatible. Installing collected packages: distribute, androguard Could not install packages due to an EnvironmentError: [Errno 13] Permission denied: '/usr/local/lib/python2.7/dist-packages/distribute-0.7.3.dist-info' Consider using the --user option or check the permissions.

You are using pip version 18.0, however version 18.1 is available. You should consider upgrading via the 'pip install --upgrade pip' command.

idanr1986 commented 5 years ago

please install androguard 1.9 until ill update the lib to 3.3

wickywaka commented 5 years ago

I think we already did it. Check the pull request.

danixen commented 5 years ago

Hi everyone.

I'm having the same problem as the OP: Analysis failed: The package "modules.packages.apk" start function encountered an unhandled exception: bufsize must be an integer

Was anyone able to solve this?

randomssr commented 4 years ago

Hi everyone. I'm having the problem. Error: Analysis failed: The package "modules. packages. apk" start function encountered an unhandled exception: [Erno 8] Exec format image Could anyone tell me how to solve it?