Skip to content

Error 9: Bad magic for valid .exe #201

@markus-wa

Description

@markus-wa

Hi, I'm getting the following error when parsing the a .exe file - unfortunately I can't attach it here as the data is sensitive

The file can be opened via CFF Explorer without any problems

ErrString: Bad magic
ErrLoc: ParsePEFromBuffer:2528
Err: 9

⚠️ - we are performing static analysis on suspicious binaries and the attached file may not be safe to execute, therefore I have renamed it to .bin and zipped it into a password protected file - the password is donotexec.

It seems pe-parse can't get the nameSection form nameVA

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions