Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RTF files are broken #609

Closed
chivay opened this issue Aug 9, 2021 · 0 comments · Fixed by #610
Closed

RTF files are broken #609

chivay opened this issue Aug 9, 2021 · 0 comments · Fixed by #610
Assignees
Labels
bug Something isn't working

Comments

@chivay
Copy link
Collaborator

chivay commented Aug 9, 2021

Analysis failed
Traceback (most recent call last):
  File "/opt/venvs/drakrun/lib/python3.7/site-packages/drakrun/main.py", line 71, in wrapper
    method(self, *args, **kwargs)
  File "/opt/venvs/drakrun/lib/python3.7/site-packages/drakrun/main.py", line 675, in process
    sample_startup.get_sample_startup_command(extension, sample, sample_path),
  File "/opt/venvs/drakrun/lib/python3.7/site-packages/drakrun/sample_startup.py", line 23, in get_sample_startup_command
    start_command = get_office_file_startup_command(extension, file_path)
  File "/opt/venvs/drakrun/lib/python3.7/site-packages/drakrun/sample_startup.py", line 47, in get_office_file_startup_command
    vbaparser = VBA_Parser(file_path)
  File "/opt/venvs/drakrun/lib/python3.7/site-packages/oletools/olevba.py", line 2732, in __init__
    raise FileOpenError(msg)
oletools.olevba.FileOpenError: Failed to open file /tmp/drakrun/vm-9/malwar.rtf is RTF, which cannot contain VBA Macros. Please use rtfobj to analyse it.
@chivay chivay added the bug Something isn't working label Aug 9, 2021
@chivay chivay linked a pull request Aug 10, 2021 that will close this issue
@chivay chivay closed this as completed Aug 10, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants