mandiant / mandiant/capa

Bad Memory Access causes capa script/binary to fail and exit

Open
#1,859 3 comments 0 reactions 0 assignees View on GitHub
bug viv-bug
Dominant language
Python
Stars
6.2k
Forks
726
Avg merge
11d 11h
Merged PRs (30d)
7

Description

When analyzing ELF files. Error appears on windows executable versions above 3.0 (Tested: 4.0, 5.0 and 6.1) Version 3.0 work as intended
![image](https://github.com/mandiant/capa/assets/151056170/52ce7ecf-2ddc-4ed6-919f-7774509e3ae3)

Contributor guide

Open the contributing guide

Research direction

Reproduce the failure by analyzing ELF files with Windows executable versions 3.0, 4.0, 5.0, and 6.1, comparing the working and failing cases. Trace the bad memory access that causes the capa script or binary to exit, then verify that the affected versions complete analysis without the failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
reverse-engineering
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.