lqhl / just-another-malware-analyzer

Automatically exported from code.google.com/p/just-another-malware-analyzer
2 stars 3 forks source link

Access denied for malware.exe #1

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Use Virtualbox running Win 7 as guest
2. Execute xml_dumper

What is the expected output? What do you see instead?
Complete results.Saw

$ python ~/Desktop/jama/xmlrpc_client.py http://localhost:8000 
bfe00ca2aa27501cb4fd00655435555d /cygdrive/c/jama-tmp/
[Sun Jul 15 15:51:05 2012] Writting static report [DONE]
[Sun Jul 15 15:51:07 2012] Checking server http://localhost:8000 status: [ALIVE]
sh: toolsstrings.exe: command not found
[Sun Jul 15 15:51:08 2012] Error running dump (<Fault 1: "<type 
'exceptions.WindowsError'>:[Error 5] Access is denied: 
'C:\\\\jama-tmp\\\\bfe00ca2aa27501cb4fd00655435555d\\\\malware.exe'">), retry 
number 0...

What version of the product are you using? On what operating system?
SVN version. Host is Linux Mint

Please provide any additional information below.
Config file:

#!/usr/bin/env python

# timeout is five minutes
TIMEOUT = 300

DUMP_DIR = r"C:\jama-tmp"

PM_PATH = r"/home/najmi/Desktop/jama/tools/Procmon.exe"

PROCDUMP_PATH = r"/home/najmi/Desktop/jama/tools/procdump.exe"

Original issue reported on code.google.com by najmi.zabidi on 15 Jul 2012 at 7:53

GoogleCodeExporter commented 9 years ago
Well, figured out since I am running using Cygwin (which I am familiar most)

xmlrpc_client.py
 containts tool\strings.exe .. changed to tool/strings.exe

but the problem for [Sun Jul 15 15:58:39 2012] Error running dump (<Fault 1: 
"<type 'exceptions.WindowsError'>:[Error 5] Access is denied: 
'C:\\\\jama-tmp\\\\bfe00ca2aa27501cb4fd00655435555d\\\\malware.exe'">), retry 
number 0...

still exist. It popped out SysInternal software.

Original comment by najmi.zabidi on 15 Jul 2012 at 8:00