pe-parse
pe-parse copied to clipboard
Error 9: Bad magic for valid .exe
trafficstars
Hi, I'm getting the following error when parsing the a .exe file - unfortunately I can't attach it here as the data is sensitive
The file can be opened via CFF Explorer without any problems
ErrString: Bad magic
ErrLoc: ParsePEFromBuffer:2528
Err: 9
:warning: - we are performing static analysis on suspicious binaries and the attached file may not be safe to execute, therefore I have renamed it to .bin and zipped it into a password protected file - the password is donotexec.
It seems pe-parse can't get the nameSection form nameVA