From f05c7b6a93ff5a166d338d9d9fdd6a7825c33918 Mon Sep 17 00:00:00 2001 From: Terrtia Date: Tue, 8 Aug 2023 11:27:57 +0200 Subject: [PATCH] fix: [module extractor] fix invalid yara offset --- bin/lib/module_extractor.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/lib/module_extractor.py b/bin/lib/module_extractor.py index 681d666e..b6254372 100755 --- a/bin/lib/module_extractor.py +++ b/bin/lib/module_extractor.py @@ -110,7 +110,7 @@ def convert_byte_offset_to_string(b_content, offset): return offset except UnicodeDecodeError as e: logger.error(f'Yara offset converter error, {str(e)}\n{offset}/{len(b_content)}') - return convert_byte_offset_to_string(b_content, offset) + return convert_byte_offset_to_string(b_content, offset - 1) # TODO RETRO HUNTS