Nuked Script[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Nuked Script.exe
Size

418KB
MD5

fe46f56e121f3c7a23c5525b9489c70e
SHA1

22cfeca71bfa515ade49c29a383ca0ce2558e53b
SHA256

ed82970e35c6e8a9ac68e97d1fbce78ca6344868aedf8455060b6c41e2af1d50
SHA512

09d96e51a1fcee2bab7323a8fba687d6aef93100e86d16b4f5fd54a664955486012c9a9f93c608d06aa24060c91a39a3d4658dd2572be398c14b8a19ad9ba747
SSDEEP

12288:7GBqoofbyQ/5kjClRM1Lu9TM0bToC9VPiX:7PBeQxk2LMGeUV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nuked Script.exe

Files

Nuked Script.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\tauro\source\repos\Nuked Script\Nuked Script\obj\Release\Nuked Script.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 415KB - Virtual size: 415KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ