[prev in list] [next in list] [prev in thread] [next in thread] 

List:       cuckoo
Subject:    [cuckoo] Problems with zip files
From:       claudio () shadowserver ! org (Claudio)
Date:       2013-07-01 16:51:17
Message-ID: 51D1B385.6020106 () shadowserver ! org
[Download RAW message or body]

As the documentation explains, if you haven't specified the file name
contained in the zip and it's not called sample.exe, it's not going to
be able to magically guess what has to be executed in the zip.
If you did specify it or it actually is called sample.exe and if the
extraction of the archive worked good, then the file might be corrupted.
Read the analysis.log for additional information.

On 07/01/2013 06:42 PM, Marcus Lahr wrote:
> Dear,
> 
> I'm having problems with the cuckoo 0.6.
> By sending compressed files, using the command line or the web version
> with the zip package, I get the following error:
> 
> 2013-07-01 11:37:49,037 [lib.cuckoo.core.guest] INFO: Starting analysis
> on guest (id=cuckoo1, ip=192.168.56.101)
> 2013-07-01 11:38:00,316 [lib.cuckoo.core.scheduler] ERROR: Analysis
> failed: The package "modules.packages.zip" start function raised an
> error: Unable to execute initial process, analysis aborted
> 2013-07-01 11:38:02,045 [modules.processing.behavior] ERROR: Analysis
> results folder does not contain any file.
> 
> Already researched the history list and community forum, but the
> solution offered there did not work in this case.
> 
> Has anyone experienced this problem?
> 
> Regards,
> 
> Marcus
> 
> 
> _______________________________________________
> cuckoo mailing list
> cuckoo at public.honeynet.org
> https://public.honeynet.org/mailman/listinfo/cuckoo
> 


[prev in list] [next in list] [prev in thread] [next in thread]