Closed dhondta closed 1 year ago
@smarbal For the following lines :
00:00:03.901 [WARNING] Bad expression: checksum == 0
00:00:03.901 [ERROR] name 'checksum' is not defined
00:00:03.905 [WARNING] Bad expression: size_of_headers == 512
00:00:03.905 [ERROR] name 'size_of_headers' is not defined
00:00:03.909 [WARNING] Bad expression: size_of_initializeddata >= 3 * 1024 * 1024
00:00:03.909 [ERROR] name 'size_of_initializeddata' is not defined
You probably have MS-DOS executables in your dataset. When we compute the Features
registry, pefeats
only applies to PE32, PE64 and .NET (that's the expected behavior as pefeats
fails to parse MS-DOS). Therefore, you get errors when trying to compute the features for the MS-DOS files of your dataset.
The quick fix is to remove MS-DOS executables from your dataset.
From @smarbal :
Hello @dhondta, My reduced features set is ready but I can´'t test it right now due to this bug. Note that a bug also happens during the features computing phase when using a full dataset (with files) with a reduced features set :