search

optiv / ScareCrow

ScareCrow - Payload creation framework designed around EDR bypass.
2.71k stars 503 forks source link

cmd.Run() failed with exit status 0xffffffff #39

Closed a1phaboy closed 2 years ago

a1phaboy commented 2 years ago

when I after step : [*] Signing Outlook.exe With a Fake Cert, then I got cmd.Run() failed with exit status 0xffffffff. my env: go version go1.17.1 windows/amd64

OpenSSL 3.0.0 7 sep 2021 (Library: OpenSSL 3.0.0 7 sep 2021)

osslsigncode 2.2, using: OpenSSL 1.1.1k 25 Mar 2021 (Library: OpenSSL 1.1.1k 25 Mar 2021) libcurl/7.78.0 OpenSSL/1.1.1k zlib/1.2.11

a1phaboy commented 2 years ago

Although I rebuild the project, the error still appear

Tylous commented 2 years ago

Can you please confirm the following are installed and that you are not on a windows machine?

a1phaboy commented 2 years ago

yep, I'm on a windows machine and my version is 10.0.19042, my mingw-w64 version is x86_64-8.1.0-release-posix-seh-rt_v6-rev0 and lt's in my %path%, but the error:"exec: "": executable file not found in %PATH%: "seems that throw out on the 94 line in ScareCrow.go, am I lost anything?

Tylous commented 2 years ago

There are known issues with calling osslsigncode on Windows, I would recommend building it on Linux or OSX.

serkonda7 commented 2 years ago

May this be reopened to be easier recognizeable by others? It could be tagged with something like dependency-issue