Author Topic: PE Data error  (Read 99 times)

0 Members and 1 Guest are viewing this topic.

October 12, 2017, 12:57:14 pm

plamentenev

  • Newbie

  • Offline
  • *

  • 4
  • Reputation:
    0
    • View Profile
PE Data error
« on: October 12, 2017, 12:57:14 pm »
Hi I started using MFT before a few days and I think this is a really wonderful tool.
But I have a problem and if you can help will be very cool!
When I click on the PE Data tab of the uploaded sample, the message "Unable to load data." is appear. It is the same with a doc or pdf file - when I click this tab the error message is appeared.



Maybe something is not set correctly, but I`am not sure what is it!
Would you help me?!

Reply #1October 12, 2017, 01:22:49 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 1821
  • Reputation:
    68
    • View Profile
Re: PE Data error
« Reply #1 on: October 12, 2017, 01:22:49 pm »
Hi plamentenev,

Welcome to Adlice.com Forum.
Could you please attach Apache logfile (last lines) in your next reply ?

Regards.

Reply #2October 12, 2017, 01:53:30 pm

plamentenev

  • Newbie

  • Offline
  • *

  • 4
  • Reputation:
    0
    • View Profile
Re: PE Data error
« Reply #2 on: October 12, 2017, 01:53:30 pm »
Thanks for quick response!
This message was find in the var/logs/apache2/error.log:

Traceback (most recent call last):
  File "/var/www/html/mrf/src/modules/pefile/peparse.py", line 2, in <module>
    import os, sys, pefile, json, base64, struct, binascii, time, unicodedata, re
  File "/var/www/html/mrf/src/modules/pefile/pefile.py", line 26, in <module>
    from past.builtins import cmp, long
ImportError: No module named past.builtins

In the access.log there is nothing strange.


Reply #3October 12, 2017, 02:16:20 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 1821
  • Reputation:
    68
    • View Profile
Re: PE Data error
« Reply #3 on: October 12, 2017, 02:16:20 pm »
Hi plamentenev,

Could you please install the Future package and test if it solves the issue ?
Code: [Select]
pip install future
Regards.

Reply #4October 12, 2017, 02:40:50 pm

plamentenev

  • Newbie

  • Offline
  • *

  • 4
  • Reputation:
    0
    • View Profile
Re: PE Data error
« Reply #4 on: October 12, 2017, 02:40:50 pm »
I did it. Now the message i different: PE Exception: "No module named pyasn1.codec.ber" - but this is for PE samples only.
For doc and pdf files the error is: "Unable to load data."

PS: Which version of Python is recommended for use with MRF tool. I use 2.7.6 right now.

Best regards.
« Last Edit: October 12, 2017, 02:51:00 pm by plamentenev »

Reply #5October 12, 2017, 02:45:42 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 1821
  • Reputation:
    68
    • View Profile
Re: PE Data error
« Reply #5 on: October 12, 2017, 02:45:42 pm »
Hi plamentenev,

It seems there is an issue with some Python modules.
Could you please try the following command line ?
Code: [Select]
sudo apt-get --reinstall install python-pyasn1 python-pyasn1-modules
Regards.

Reply #6October 12, 2017, 02:58:17 pm

plamentenev

  • Newbie

  • Offline
  • *

  • 4
  • Reputation:
    0
    • View Profile
Re: PE Data error
« Reply #6 on: October 12, 2017, 02:58:17 pm »
YES!
Now everything works perfect!
Thank you man you are #1 and the tool is very cool!

Best regards!

Reply #7October 12, 2017, 03:22:06 pm

Curson

  • Global Moderator
  • Hero Member

  • Offline
  • *****

  • 1821
  • Reputation:
    68
    • View Profile
Re: PE Data error
« Reply #7 on: October 12, 2017, 03:22:06 pm »
Hi plamentenev,

Thanks for your feedback. I'm glad I was able to help you.
Many thanks for the kind words, this is appreciated.

Regards.

Reply #8October 17, 2017, 12:16:57 pm

Tigzy

  • Administrator
  • Hero Member

  • Offline
  • *****

  • 746
  • Reputation:
    89
  • Personal Text
    Owner, Adlice Software
    • View Profile
    • Adlice Software
Re: PE Data error
« Reply #8 on: October 17, 2017, 12:16:57 pm »
Hey, just so we know did you follow the prerequisites?
https://www.adlice.com/documentation/mrf/documentation/#install