search

mandiant / flare-vm

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.
Apache License 2.0
6.35k stars 896 forks source link

VC Runtimes #483

Closed stevemk14ebr closed 11 months ago

stevemk14ebr commented 1 year ago

Include the older visual c++ runtime redistributables for increased compatibility with older malware.

From: https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170

VC 2012 X86 11.0.61030.0 en_visual_cpp_redistributable_for_visual_studio_2012_update_4_x86_3161523.exe X64 11.0.61030.0 en_visual_cpp_redistributable_for_visual_studio_2012_update_4_x64_3161523.exe

VC 2013 X86 12.0.40664.0 vcredist_x86.exe X64 12.0.40664.0 vcredist_x64.exe

VC 2015, 2017, 2018, 2019, and 2022 all use the same redistributable. We should always choose the latest for maximum compatibility. X86 https://aka.ms/vs/17/release/vc_redist.x86.exe X64 https://aka.ms/vs/17/release/vc_redist.x64.exe

Our internal labs for example require VC 2013 to run correctly

Ana06 commented 11 months ago

I think adding https://community.chocolatey.org/packages/vcredist-all to the config should fix this issue as it should include vcredist2005-2017