Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

vmray: Input file is not a valid VMRay analysis archive: VMRay archive does not contain static data (file_type: MSI Setup) #2403

Open
mr-tz opened this issue Sep 26, 2024 · 1 comment
Labels
enhancement New feature or request vmray related to VMRay sandbox report analysis

Comments

@mr-tz
Copy link
Collaborator

mr-tz commented Sep 26, 2024

example MSI analysis archive I've looked at doesn't have file_analysis.ref_static_data so we fail here

@mr-tz mr-tz added enhancement New feature or request vmray related to VMRay sandbox report analysis labels Sep 26, 2024
@mike-hunhoff
Copy link
Collaborator

We presently fast fail if the VMRay archive does not contain static analysis data for the file submission. I'm guessing in the case of an MSI file VMRay does not capture static analysis data, but it would still be very useful to extract capabilities from the sandbox run. The static analysis data is used for global and file scope features, we can simply skip these features when analyzing an archive that doesn't contain static analysis data for the file submission.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request vmray related to VMRay sandbox report analysis
Projects
None yet
Development

No branches or pull requests

2 participants