Skip to content

Error 9: Bad magic for valid .exe #201

@markus-wa

Description

@markus-wa

Hi, I'm getting the following error when parsing the a .exe file - unfortunately I can't attach it here as the data is sensitive

The file can be opened via CFF Explorer without any problems

ErrString: Bad magic
ErrLoc: ParsePEFromBuffer:2528
Err: 9

⚠️ - we are performing static analysis on suspicious binaries and the attached file may not be safe to execute, therefore I have renamed it to .bin and zipped it into a password protected file - the password is donotexec.

It seems pe-parse can't get the nameSection form nameVA

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions