Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Isolated bad bytes at a weird place #8

Open
wan-xiang opened this issue Dec 26, 2024 · 2 comments
Open

Isolated bad bytes at a weird place #8

wan-xiang opened this issue Dec 26, 2024 · 2 comments

Comments

@wan-xiang
Copy link

sample url
https://www.virustotal.com/gui/file/9e160846370b7a27352d44101c7a5d3e45de4e9c605e75480249d4255b022cc4

gochek64.exe check -d 9e160846370b7a27352d44101c7a5d3e45de4e9c605e75480249d4255b022cc4

The bad bytes is 0x00, is that normal?

result
[+] Windows Defender - 1m25.1256274s
[!] Isolated bad bytes at offset 0x2A840 in the original file [approximately 174144 / 177152 bytes]
00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00000010 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|

[] Trojan:Win32/Wacatac.B!ml
[
] Trojan:Win32/Sabsik.TE.A!ml

@gatariee
Copy link
Owner

no idea, can you reproduce the same results with ThreatCheck?

@wan-xiang
Copy link
Author

wan-xiang commented Dec 27, 2024

I tried to compile the ThreatCheck project, but there some errors occurred.
That's it for now. Thanks reply.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants