diff --git a/capa/features/extractors/elf.py b/capa/features/extractors/elf.py index e0dc596c..fd0087ef 100644 --- a/capa/features/extractors/elf.py +++ b/capa/features/extractors/elf.py @@ -658,7 +658,7 @@ class SymTab: ) elif bitness == 64: name_offset, info, other, shndx, value, size = struct.unpack_from( - endian + "IBBBQQ", symtab_buf, i * self.symtab.entsize + endian + "IBBhQQ", symtab_buf, i * self.symtab.entsize ) self.symbols.append(Symbol(name_offset, value, size, info, other, shndx))