I am trying to run cuckoo via python and it is presenting an error message relating to yara.
yara.libyara_wrapper.YaraSyntaxError: /home/cybersecurity/.cache/pypoetry/virtualenvs/capev2-t2x27zRb-py3.10/lib/python3.10/site-packages/sflock/data/yara/shellcodes.yar:74: misplaced wildcard or skip at string "$peb_parsing64", wildcards and skips are only allowed after the first byte of the string
I tried going into the file location and editing the file but that did not work. Here is the lines in the file that give the error
$peb_parsing = {
64 A1 30 ?? ?? ??
64 8B (1D | 0D | 15 | 35 | 3D) 30 ?? ?? ??
31 (C0 | DB | C9 | D2 | F6 | FF) [0-8] 64 8B ?? 30
[0-8]
8B ?? 0C
[0-8]
8B ?? (0C | 14 | 1C)
[0-8]
8B ?? (28 | 30)
}
New contributor
John is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.