{"action":"created","issue":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2218","repository_url":"https://api.github.com/repos/cuckoosandbox/cuckoo","labels_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2218/labels{/name}","comments_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2218/comments","events_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2218/events","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/2218","id":311331105,"number":2218,"title":"cuckoo submit utility not working and other issues","user":{"login":"me0ne0","id":28728882,"avatar_url":"https://avatars2.githubusercontent.com/u/28728882?v=4","gravatar_id":"","url":"https://api.github.com/users/me0ne0","html_url":"https://github.com/me0ne0","followers_url":"https://api.github.com/users/me0ne0/followers","following_url":"https://api.github.com/users/me0ne0/following{/other_user}","gists_url":"https://api.github.com/users/me0ne0/gists{/gist_id}","starred_url":"https://api.github.com/users/me0ne0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/me0ne0/subscriptions","organizations_url":"https://api.github.com/users/me0ne0/orgs","repos_url":"https://api.github.com/users/me0ne0/repos","events_url":"https://api.github.com/users/me0ne0/events{/privacy}","received_events_url":"https://api.github.com/users/me0ne0/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":28,"created_at":"2018-04-04T17:57:11Z","updated_at":"2018-04-19T20:09:09Z","closed_at":null,"author_association":"NONE","body":"Thanks for creating an issue! But first: did you read our community guidelines?\r\nhttps://cuckoo.sh/docs/introduction/community.html\r\n\r\n##### My issue is: \r\ncuckoo submit utility for folder is not working and other errors produced while using web interface\r\n##### My Cuckoo version and operating system are:\r\ncuckoo version 2.0.5 and host OS ubuntu 16.04.5\r\n##### This can be reproduced by:\r\n\r\n##### The log, error, files etc can be found at:\r\nTask # 39 VirusShare_04d56751f25d6169005395ccd13eae55\r\n\r\n2018-04-04 20:39:23,675 [cuckoo.core.scheduler] INFO: Task #39: acquired machine cuckoo1 (label=win764-1)\r\n2018-04-04 20:39:23,782 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 30233 (interface=vboxnet1, host=10.10.10.11)\r\n2018-04-04 20:39:34,172 [cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=10.10.10.11)\r\n2018-04-04 20:39:48,183 [cuckoo.common.netlog] CRITICAL: BsonParser lacking data.\r\n2018-04-04 20:40:18,756 [cuckoo.processing.screenshots] ERROR: Could not find tesseract binary, screenshot OCR aborted.\r\n2018-04-04 20:40:33,923 [cuckoo.core.guest] INFO: cuckoo1: analysis completed successfully\r\n\r\n\r\n\r\nTask # 40  VirusShare_4d796194d32a6beeebeab0c96159602d\r\n\r\nINFO: Task #40: acquired machine cuckoo1 (label=win764-1)\r\n2018-04-04 20:40:39,192 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 30511 (interface=vboxnet1, host=10.10.10.11)\r\n2018-04-04 20:40:51,189 [cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=10.10.10.11)\r\n2018-04-04 20:40:51,409 [cuckoo.processing.screenshots] ERROR: Could not find tesseract binary, screenshot OCR aborted.\r\n2018-04-04 20:41:04,826 [cuckoo.processing.static] CRITICAL: You do not have the m2crypto library installed preventing certificate extraction. Please read the Cuckoo documentation on installing m2crypto (you need SWIG installed and then `pip install m2crypto==0.24.0`)!\r\n2018-04-04 20:43:20,881 [cuckoo.core.guest] INFO: cuckoo1: analysis completed successfully\r\n-----------------------------------------------------------\r\nThe m2crypto library is already installed\r\n\r\ni guess these errors are produced when a malware is packed and obfuscated? Whats your opinion\r\n================================================================================\r\n\r\n2nd error:\r\n---------------\r\nVirusShare_4cea477a5ed4fef9bcfa4d940e64a681\r\n\r\n\r\n2018-04-04 20:43:24,643 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"VirusShare_4cea477a5ed4fef9bcfa4d940e64a681\" (task #41, options \"procmemdump=yes,route=none\")\r\n2018-04-04 20:43:25,139 [cuckoo.core.scheduler] INFO: Task #41: acquired machine cuckoo1 (label=win764-1)\r\n2018-04-04 20:43:25,262 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 30836 (interface=vboxnet1, host=10.10.10.11)\r\n2018-04-04 20:43:27,057 [cuckoo.common.netlog] CRITICAL: BsonParser lacking data.\r\n2018-04-04 20:43:37,627 [cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=10.10.10.11)\r\n2018-04-04 20:43:52,998 [cuckoo.processing.screenshots] ERROR: Could not find tesseract binary, screenshot OCR aborted.\r\n2018-04-04 20:43:58,914 [cuckoo.core.scheduler] ERROR: Error from the Cuckoo Guest: Analysis failed: Unable to execute the initial process, analysis aborted.\r\nTraceback (most recent call last):\r\n  File \"C:\\flmgvwoii\\analyzer.py\", line 798, in <module>\r\n    success = analyzer.run()\r\n  File \"C:\\flmgvwoii\\analyzer.py\", line 650, in run\r\n    pids = self.package.start(self.target)\r\n  File \"C:\\flmgvwoii\\modules\\packages\\exe.py\", line 23, in start\r\n    return self.execute(path, args=shlex.split(args))\r\n  File \"C:\\flmgvwoii\\lib\\common\\abstracts.py\", line 166, in execute\r\n    \"Unable to execute the initial process, analysis aborted.\"\r\nCuckooPackageError: Unable to execute the initial process, analysis aborted.\r\n\r\n2018-04-04 20:44:06,630 [cuckoo.processing.screenshots] ERROR: Could not find tesseract binary, screenshot OCR aborted.\r\n--------------------------------------------------------------------------------------\r\nVirusShare_4cef2e575f765f9d2e847cee1af02b28\r\n\r\n2018-04-04 20:44:06,909 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"VirusShare_4cef2e575f765f9d2e847cee1af02b28\" (task #42, options \"procmemdump=yes,route=none\")\r\n2018-04-04 20:44:07,331 [cuckoo.core.scheduler] INFO: Task #42: acquired machine cuckoo1 (label=win764-1)\r\n2018-04-04 20:44:07,595 [cuckoo.auxiliary.sniffer] INFO: Started sniffer with PID 31089 (interface=vboxnet1, host=10.10.10.11)\r\n2018-04-04 20:44:11,889 [cuckoo.processing.static] CRITICAL: You do not have the m2crypto library installed preventing certificate extraction. Please read the Cuckoo documentation on installing m2crypto (you need SWIG installed and then `pip install m2crypto==0.24.0`)!\r\n2018-04-04 20:44:19,853 [cuckoo.core.guest] INFO: Starting analysis on guest (id=cuckoo1, ip=10.10.10.11)\r\n2018-04-04 20:44:29,693 [weasyprint] WARNING: Ignored `-ms-text-size-adjust: 100%` at 21:3, unknown property.\r\n2018-04-04 20:44:29,791 [weasyprint] WARNING: Ignored `-webkit-text-size-adjust: 100%` at 22:3, unknown property.\r\n2018-04-04 20:44:29,830 [weasyprint] WARNING: Ignored `-webkit-text-decoration-skip: objects` at 112:3, unknown property.\r\n2018-04-04 20:44:29,855 [weasyprint] WARNING: Ignored `text-decoration: underline dotted` at 133:3, invalid value.\r\n2018-04-04 20:44:29,925 [weasyprint] WARNING: Ignored `-webkit-appearance: button` at 298:3, unknown property.\r\n2018-04-04 20:44:29,963 [weasyprint] WARNING: Invalid or unsupported selector 'button::-moz-focus-inner,\r\n[type=\"button\"]::-moz-focus-inner,\r\n[type=\"reset\"]::-moz-focus-inner,\r\n[type=\"submit\"]::-moz-focus-inner ', Unknown pseudo-element: -moz-focus-inner\r\n2018-04-04 20:44:29,969 [weasyprint] WARNING: Ignored `outline: 1px dotted ButtonText` at 321:3, invalid value.\r\n2018-04-04 20:44:30,011 [weasyprint] WARNING: Invalid or unsupported selector '[type=\"number\"]::-webkit-inner-spin-button,\r\n[type=\"number\"]::-webkit-outer-spin-button ', Unknown pseudo-element: -webkit-inner-spin-button\r\n2018-04-04 20:44:30,020 [weasyprint] WARNING: Ignored `-webkit-appearance: textfield` at 394:3, unknown property.\r\n2018-04-04 20:44:30,035 [weasyprint] WARNING: Ignored `outline-offset: -2px` at 395:3, unknown property.\r\n2018-04-04 20:44:30,060 [weasyprint] WARNING: Ignored `-webkit-appearance: none` at 404:3, unknown property.\r\n2018-04-04 20:44:30,079 [weasyprint] WARNING: Ignored `-webkit-appearance: button` at 413:3, unknown property.\r\n2018-04-04 20:44:30,090 [weasyprint] WARNING: Invalid or unsupported selector '::-webkit-file-upload-button ', Unknown pseudo-element: -webkit-file-upload-button\r\n2018-04-04 20:44:30,108 [weasyprint] WARNING: Invalid or unsupported selector 'details, /* 1 */\r\nmenu ', (<Comment  1 >, u'expected a compound selector, got comment')\r\n2018-04-04 20:44:30,133 [weasyprint] WARNING: Ignored `-webkit-font-smoothing: antialiased` at 472:2, unknown property.\r\n2018-04-04 20:44:30,148 [weasyprint] WARNING: Ignored `-webkit-box-sizing: border-box` at 478:2, unknown property.\r\n2018-04-04 20:44:30,157 [weasyprint] WARNING: Ignored `-moz-box-sizing: border-box` at 479:2, unknown property.\r\n2018-04-04 20:44:30,193 [weasyprint] WARNING: Ignored `display: flex` at 508:2, invalid value.\r\n2018-04-04 20:44:30,201 [weasyprint] WARNING: Ignored `align-items: center` at 509:2, unknown property.\r\n2018-04-04 20:44:30,213 [weasyprint] WARNING: Ignored `flex-basis: 93px` at 516:2, unknown property.\r\n2018-04-04 20:44:30,235 [weasyprint] WARNING: Ignored `display: flex` at 551:25, invalid value.\r\n2018-04-04 20:44:30,247 [weasyprint] WARNING: Ignored `flex-basis: 100%` at 552:29, unknown property.\r\n2018-04-04 20:44:30,256 [weasyprint] WARNING: Ignored `flex-grow: 0` at 553:39, unknown property.\r\n2018-04-04 20:44:30,273 [weasyprint] WARNING: Ignored `cursor: pointer` at 565:39, the property does not apply for the print media.\r\n2018-04-04 20:44:30,297 [weasyprint] WARNING: Ignored `box-shadow: 0px 1px 0px rgba(255,255,255,1)` at 580:2, unknown property.\r\n2018-04-04 20:44:30,334 [weasyprint] WARNING: Ignored `display: flex` at 621:2, invalid value.\r\n2018-04-04 20:44:30,339 [weasyprint] WARNING: Ignored `flex-direction: column` at 622:2, unknown property.\r\n\r\n41--42...Error from the Cuckoo Guest:Analysis failed: Unable to execute the initial process, analysis aborted. Traceback (most recent call last): as seen from cuckoo web.\r\n\r\n========================================================\r\n\r\n3rd ERROR and Main issue\r\n\r\n-----------------------------------------\r\n(cuckoo) mxn@mxn-Latitude-E6510:~$ cuckoo submit --machine cuckoo1 /home/mxn/Downloads/test0\r\nSuccess: File \"/home/mxn/Downloads/test0/1.exe\" added as task with ID #112\r\nSuccess: File \"/home/mxn/Downloads/test0/0.exe\" added as task with ID #113\r\nSuccess: File \"/home/mxn/Downloads/test0/newbos2.exe\" added as task with ID #114\r\nSuccess: File \"/home/mxn/Downloads/test0/2d.exe\" added as task with ID #115\r\nSuccess: File \"/home/mxn/Downloads/test0/340s.exe\" added as task with ID #116\r\n\r\n2018-04-04 22:45:39,512 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"1.exe\" (task #112, options \"\")\r\n2018-04-04 22:45:39,592 [cuckoo.core.scheduler] ERROR: Cannot acquire machine: No machines match selection criteria.\r\n2018-04-04 22:45:39,733 [cuckoo.processing.behavior] WARNING: Analysis results folder does not exist at path '/home/mxn/.cuckoo/storage/analyses/112/logs'.\r\n2018-04-04 22:45:40,787 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"0.exe\" (task #113, options \"\")\r\n2018-04-04 22:45:40,998 [cuckoo.core.scheduler] ERROR: Cannot acquire machine: No machines match selection criteria.\r\n2018-04-04 22:45:41,167 [cuckoo.processing.behavior] WARNING: Analysis results folder does not exist at path '/home/mxn/.cuckoo/storage/analyses/113/logs'.\r\n2018-04-04 22:45:41,244 [cuckoo.processing.network] WARNING: The PCAP file does not exist at path \"/home/mxn/.cuckoo/storage/analyses/112/dump.pcap\".\r\n2018-04-04 22:45:42,076 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"newbos2.exe\" (task #114, options \"\")\r\n2018-04-04 22:45:42,258 [cuckoo.core.scheduler] ERROR: Cannot acquire machine: No machines match selection criteria.\r\n2018-04-04 22:45:42,444 [cuckoo.processing.behavior] WARNING: Analysis results folder does not exist at path '/home/mxn/.cuckoo/storage/analyses/114/logs'.\r\n2018-04-04 22:45:43,539 [cuckoo.processing.network] WARNING: The PCAP file does not exist at path \"/home/mxn/.cuckoo/storage/analyses/113/dump.pcap\".\r\n2018-04-04 22:45:43,704 [cuckoo.core.scheduler] INFO: Starting analysis of FILE \"2d.exe\" (task #115, options \"\")\r\n2018-04-04 22:45:43,999 [cuckoo.core.scheduler] ERROR: Cannot acquire machine: No machines match selection criteria.\r\n2018-04-04 22:45:44,159 [cuckoo.processing.behavior] WARNING: Analysis results folder does not exist at path '/home/mxn/.cuckoo/storage/analyses/115/logs'.\r\n2018-04-04 22:45:44,805 [cuckoo.processing.debug] ERROR: Error processing task #112: it appears that the Virtual Machine hasn't been able to contact back to the Cuckoo Host. There could be a few reasons for this, please refer to our documentation on the matter: https://cuckoo.sh/docs/faq/index.html#troubleshooting-vm-network-configuration\r\n\r\n\r\nWhen submitting malwares via submit utility, i get above errors, while when i use web interface no errors occur and above files are successfully run as seen below\r\n\r\n\r\n5 | 2018-04-04 17:54 | eb93600c45e8d7cf13c3ae86aa4d4999 | newbos2.exe | reported | score: 11.2\r\n4 | 2018-04-04 17:51 | 48cd89827939b3a8976d9bb0993bc338 | 340s.exe | reported | score: 11.2\r\n3 | 2018-04-04 17:47 | 38b50102f941b4f4cba161408cf20933 | 2d.exe | reported | score: 4.8\r\n2 | 2018-04-04 17:45 | 60bcb0e1b9ae5a9b50dcff7decd656ae | 1.exe | reported | score: 2.8\r\n1 | 2018-04-04 17:44 | 2a9d0d06d292a4cbbe4a95da4650ed54 | 0.exe | reported | score: 4.6\r\n\r\nwhy is it happening?\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/comments/382865049","html_url":"https://github.com/cuckoosandbox/cuckoo/issues/2218#issuecomment-382865049","issue_url":"https://api.github.com/repos/cuckoosandbox/cuckoo/issues/2218","id":382865049,"user":{"login":"me0ne0","id":28728882,"avatar_url":"https://avatars2.githubusercontent.com/u/28728882?v=4","gravatar_id":"","url":"https://api.github.com/users/me0ne0","html_url":"https://github.com/me0ne0","followers_url":"https://api.github.com/users/me0ne0/followers","following_url":"https://api.github.com/users/me0ne0/following{/other_user}","gists_url":"https://api.github.com/users/me0ne0/gists{/gist_id}","starred_url":"https://api.github.com/users/me0ne0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/me0ne0/subscriptions","organizations_url":"https://api.github.com/users/me0ne0/orgs","repos_url":"https://api.github.com/users/me0ne0/repos","events_url":"https://api.github.com/users/me0ne0/events{/privacy}","received_events_url":"https://api.github.com/users/me0ne0/received_events","type":"User","site_admin":false},"created_at":"2018-04-19T20:09:08Z","updated_at":"2018-04-19T20:09:08Z","author_association":"NONE","body":"@doomedraven did you check it ?"}}
{"actor":{"display_login":"me0ne0"}}