{"action":"created","issue":{"url":"https://api.github.com/repos/cuckoobox/cuckoo/issues/572","labels_url":"https://api.github.com/repos/cuckoobox/cuckoo/issues/572/labels{/name}","comments_url":"https://api.github.com/repos/cuckoobox/cuckoo/issues/572/comments","events_url":"https://api.github.com/repos/cuckoobox/cuckoo/issues/572/events","html_url":"https://github.com/cuckoobox/cuckoo/issues/572","id":86448654,"number":572,"title":"The package \"modules.packages.exe\" start function raised an error: Unable to execute the initial process, analysis aborted.","user":{"login":"ajaybabu91","id":12808017,"avatar_url":"https://avatars.githubusercontent.com/u/12808017?v=3","gravatar_id":"","url":"https://api.github.com/users/ajaybabu91","html_url":"https://github.com/ajaybabu91","followers_url":"https://api.github.com/users/ajaybabu91/followers","following_url":"https://api.github.com/users/ajaybabu91/following{/other_user}","gists_url":"https://api.github.com/users/ajaybabu91/gists{/gist_id}","starred_url":"https://api.github.com/users/ajaybabu91/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ajaybabu91/subscriptions","organizations_url":"https://api.github.com/users/ajaybabu91/orgs","repos_url":"https://api.github.com/users/ajaybabu91/repos","events_url":"https://api.github.com/users/ajaybabu91/events{/privacy}","received_events_url":"https://api.github.com/users/ajaybabu91/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-06-09T04:54:16Z","updated_at":"2015-06-11T23:46:57Z","closed_at":null,"body":"when i execute calc.exe\r\nERROR: Analysis failed: The package \"modules.packages.exe\" start function raised an error: Unable to execute the initial process, analysis aborted.\r\n2015-06-09 10:08:38,123 [modules.machinery.virtualbox] INFO: Successfully generated memory dump for virtual machine with label WindowsXP_SP3_Cuckoo1 to path /home/ubuntu/cuckoo/storage/analyses/22/memory.dmp\r\n2015-06-09 10:08:42,192 [modules.processing.behavior] INFO: Analysis results folder does not contain any file or injection was disabled.\r\n2015-06-09 10:08:48,847 [volatility.obj] WARNING: NoneObject as string: Cannot find process session\r\n2015-06-09 10:08:48,847 [volatility.obj] WARNING: NoneObject as string: Cannot find process session\r\n[x86] Gathering all referenced SSDTs from KTHREADs...\r\nFinding appropriate address space for tables...\r\n2015-06-09 10:09:46,335 [modules.processing.memory] ERROR: Generic error executing volatility\r\nTraceback (most recent call last):\r\n  File \"/home/ubuntu/cuckoo/modules/processing/memory.py\", line 1047, in run\r\n    results = vol.run()\r\n  File \"/home/ubuntu/cuckoo/modules/processing/memory.py\", line 961, in run\r\n    results[\"ssdt\"] = vol.ssdt()\r\n  File \"/home/ubuntu/cuckoo/modules/processing/memory.py\", line 337, in ssdt\r\n    mem_end=syscall_mod.DllBase + syscall_mod.SizeOfImage)\r\n  File \"/usr/lib/python2.7/dist-packages/volatility/plugins/malware/apihooks.py\", line 739, in check_inline\r\n    for op in distorm3.Decompose(va, data, distorm3.Decode32Bits):\r\nNameError: global name 'distorm3' is not defined\r\n2015-06-09 10:09:46,359 [lib.cuckoo.core.plugins] ERROR: Failed to run the processing module \"NetworkAnalysis\":\r\nTraceback (most recent call last):\r\n  File \"/home/ubuntu/cuckoo/lib/cuckoo/core/plugins.py\", line 186, in process\r\n    data = current.run()\r\n  File \"/home/ubuntu/cuckoo/modules/processing/network.py\", line 593, in run\r\n    sort_pcap(self.pcap_path, sorted_path)\r\n  File \"/home/ubuntu/cuckoo/modules/processing/network.py\", line 708, in sort_pcap\r\n    batch_sort(inc, outpath, output_class=lambda path: SortCap(path, linktype=inc.linktype))\r\n  File \"/home/ubuntu/cuckoo/modules/processing/network.py\", line 635, in batch_sort\r\n    current_chunk = list(islice(input_iterator,buffer_size))\r\n  File \"/home/ubuntu/cuckoo/modules/processing/network.py\", line 677, in __iter__\r\n    self.fd = dpkt.pcap.Reader(open(self.name, \"rb\"))\r\nIOError: [Errno 2] No such file or directory: '/home/ubuntu/cuckoo/storage/analyses/22/dump.pcap'\r\n2015-06-09 10:09:46,968 [lib.cuckoo.common.objects] WARNING: Unable to match Yara signatures: 'error_on_warning' is an invalid keyword argument for this function\r\n2015-06-09 10:09:49,897 [lib.cuckoo.core.scheduler] INFO: Task #22: reports generation completed (path=/home/ubuntu/cuckoo/storage/analyses/22)\r\n2015-06-09 10:09:50,075 [lib.cuckoo.core.scheduler] INFO: Task #22: analysis procedure completed"},"comment":{"url":"https://api.github.com/repos/cuckoobox/cuckoo/issues/comments/111308154","html_url":"https://github.com/cuckoobox/cuckoo/issues/572#issuecomment-111308154","issue_url":"https://api.github.com/repos/cuckoobox/cuckoo/issues/572","id":111308154,"user":{"login":"botherder","id":1032671,"avatar_url":"https://avatars.githubusercontent.com/u/1032671?v=3","gravatar_id":"","url":"https://api.github.com/users/botherder","html_url":"https://github.com/botherder","followers_url":"https://api.github.com/users/botherder/followers","following_url":"https://api.github.com/users/botherder/following{/other_user}","gists_url":"https://api.github.com/users/botherder/gists{/gist_id}","starred_url":"https://api.github.com/users/botherder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/botherder/subscriptions","organizations_url":"https://api.github.com/users/botherder/orgs","repos_url":"https://api.github.com/users/botherder/repos","events_url":"https://api.github.com/users/botherder/events{/privacy}","received_events_url":"https://api.github.com/users/botherder/received_events","type":"User","site_admin":false},"created_at":"2015-06-11T23:46:57Z","updated_at":"2015-06-11T23:46:57Z","body":"Is the error with analysis package occurring with every file? It will raise that same error if for example the binary is corrupted or it is not for the architecture of the VM."}}