cuckoo-modified icon indicating copy to clipboard operation
cuckoo-modified copied to clipboard

Zip file tries to execute contents

Open Fryyyyy opened this issue 10 years ago • 2 comments

Submitted a zip file, which contained an HTML file:

2015-11-04 03:24:13,562 [modules.packages.zip] DEBUG: Missing file option, auto executing: contents.html 2015-11-04 03:24:13,562 [lib.api.process] ERROR: Failed to execute process from path "C:\DOCUME~1\USERNAME\LOCALS~1\Temp\contents.html" with arguments "None" (Error: %1 is not a valid Win32 application (ERROR_BAD_EXE_FORMAT))

Fryyyyy avatar Nov 12 '15 03:11 Fryyyyy

You must have specified the zip package. How many files are in the zip? If it was just the one html file, just submit the file without specifying the zip package. It'll automatically extract the .html and submit that alone for analysis using the proper package.

-Brad

brad-sp avatar Nov 13 '15 12:11 brad-sp

2015-11-04 03:24:13,015 [root] DEBUG: No analysis package specified, trying to detect it automagically.
2015-11-04 03:24:13,015 [root] INFO: Automatically selected analysis package "zip"

Fryyyyy avatar Nov 15 '15 23:11 Fryyyyy