Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Unzip Operation returning unknown BTYPE:3 error #1161

Closed
Cyber00011011 opened this issue Jan 26, 2021 · 1 comment
Closed

Unzip Operation returning unknown BTYPE:3 error #1161

Cyber00011011 opened this issue Jan 26, 2021 · 1 comment
Labels

Comments

@Cyber00011011
Copy link

Cyber00011011 commented Jan 26, 2021

Describe the bug
Unzipping a malware sample from virusshare.com returned a compression.js unknown BTYPE: 3 error

To Reproduce
I was looking at a malware sample referenced in this post:
https://twitter.com/DidierStevens/status/1353751902354350086

I found the sample on virusshare by searching for the hash and when loaded into CyberChef it produced an error. Spot checked a couple other sample from virusshare and some unzipped fine, and some others gave the same error as well.

Capture

@n1474335
Copy link
Member

n1474335 commented Sep 3, 2021

We use zlib.js for our Unzip operation and this is a problem in that library. I'll close this issue for now since there isn't much we can do in CyberChef to solve it without moving to an entirely different library or implementing zlib from scratch (not a priority at the moment).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants