pe-parse icon indicating copy to clipboard operation
pe-parse copied to clipboard

Error 9: Bad magic for valid .exe

Open markus-wa opened this issue 1 year ago • 0 comments
trafficstars

Hi, I'm getting the following error when parsing the a .exe file - unfortunately I can't attach it here as the data is sensitive

The file can be opened via CFF Explorer without any problems

ErrString: Bad magic
ErrLoc: ParsePEFromBuffer:2528
Err: 9

:warning: - we are performing static analysis on suspicious binaries and the attached file may not be safe to execute, therefore I have renamed it to .bin and zipped it into a password protected file - the password is donotexec.

It seems pe-parse can't get the nameSection form nameVA

markus-wa avatar Jul 16 '24 22:07 markus-wa