nuker[.]exe | Triage

Sharing

General

Target

nuker.exe
Size

24.5MB
MD5

86f16ea4e8118a29b3d14e379c923aac
SHA1

a2c482fa274f12f4e32a0bcd32a5648a784a21ca
SHA256

86c2bfa1421c2103e72217c27a8c5a9d6d8df4de533125b1c8af362097d5a0d1
SHA512

e336a79bfd812891f4bd8b4439f862a98b6d4554ad97b05497a7890fd3d77c1f8df5a4335176272ee9aab2efebd2d97354247aafe730e9136390d8b308b03677
SSDEEP

393216:9zOLabDO3x0ecvR6guMIO+4n7DbLRfFT+cqEsyk51pwcRDVYQZHicQGAX+PD3Q7e:7+cggtB+AbLX+jEpiOcRDVNVicQh+zj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nuker.exe

Files

nuker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 24.5MB - Virtual size: 24.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ