-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Labels
bugSomething isn't workingSomething isn't workinggood first issueGood for newcomersGood for newcomersquestionFurther information is requestedFurther information is requested
Description
When run on files received from dd-run with malware-bazaar, LIEF is unable to parse the samples, returning None
after calling lief::Binary::from
. However, when tested on malware I got from a GitHub repo, it runs fine. 2 parts to this issue
-
Why? I assume because of a malformed DOS header, in which case, it should be safe to assume the file is malicious (I think). But I am not completely sure. Or is it possibly something weird or unique about the sample source?
-
How should this be handled? Should the file be skipped? Should the row say something about it in the csv? Up for discussion
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't workinggood first issueGood for newcomersGood for newcomersquestionFurther information is requestedFurther information is requested