PE Data error

[plamentenev]

Hi I started using MFT before a few days and I think this is a really wonderful tool.
But I have a problem and if you can help will be very cool!
When I click on the PE Data tab of the uploaded sample, the message "Unable to load data." is appear. It is the same with a doc or pdf file - when I click this tab the error message is appeared.



Maybe something is not set correctly, but I`am not sure what is it!
Would you help me?!

[Curson]

Hi plamentenev,

Welcome to Adlice.com Forum.
Could you please attach Apache logfile (last lines) in your next reply ?

Regards.

[plamentenev]

Thanks for quick response!
This message was find in the var/logs/apache2/error.log:

Traceback (most recent call last):
  File "/var/www/html/mrf/src/modules/pefile/peparse.py", line 2, in <module>
    import os, sys, pefile, json, base64, struct, binascii, time, unicodedata, re
  File "/var/www/html/mrf/src/modules/pefile/pefile.py", line 26, in <module>
    from past.builtins import cmp, long
ImportError: No module named past.builtins

In the access.log there is nothing strange.

[Curson]

Hi plamentenev,

Could you please install the Future package and test if it solves the issue ?

Code: [Select]

pip install future
Regards.

[plamentenev]

I did it. Now the message i different: PE Exception: "No module named pyasn1.codec.ber" - but this is for PE samples only.
For doc and pdf files the error is: "Unable to load data."

PS: Which version of Python is recommended for use with MRF tool. I use 2.7.6 right now.

Best regards.

[Curson]

Hi plamentenev,

It seems there is an issue with some Python modules.
Could you please try the following command line ?

Code: [Select]

sudo apt-get --reinstall install python-pyasn1 python-pyasn1-modules
Regards.

[plamentenev]

YES!
Now everything works perfect!
Thank you man you are #1 and the tool is very cool!

Best regards!

[Curson]

Hi plamentenev,

Thanks for your feedback. I'm glad I was able to help you.
Many thanks for the kind words, this is appreciated.

Regards.

[Tigzy]

Hey, just so we know did you follow the prerequisites?
https://www.adlice.com/documentation/mrf/documentation/#install