nuitka-extractor
nuitka-extractor copied to clipboard
extremecoders-re
[!] Failed to locate Nuitka data in PE resources
hi. trying to disassemble some malware/stealer. can't get any further because of this error:
content:
From the last screenshot, you have grabbed this files from the temp directory I suppose.
123123.exe can't be extracted further. Note that nuitka-extractor can't extract pyc files as there are none inside. It is only for extracting DLLs, Pyds and other binary resources from nuitka onefile executables. In your case this is already extracted.
и как получить исходный код?
Невозможно получить исходный код, поскольку он скомпилирован в машинный код.
I am having the same error and I am not pulling from temp. Running on OSX (I added a pull request for making a OSX bin)
The detect it easy signature which nuitka is here: https://github.com/horsicq/Detect-It-Easy/blob/master/db/PE/Nuitka.1.sg
I guess the logic in nuitka-extractor needs to be updated.
No,
I can 100% confirm its packed with Nuitka - I asked the author and he told me. and i know hes telling the truth as well.
On Tue, May 20, 2025 at 10:36 AM extremecoders-re @.***> wrote:
extremecoders-re left a comment (extremecoders-re/nuitka-extractor#9) https://github.com/extremecoders-re/nuitka-extractor/issues/9#issuecomment-2894669269
The detect it easy signature which nuitka is here: https://github.com/horsicq/Detect-It-Easy/blob/master/db/PE/Nuitka.1.sg
I guess the logic in nuitka-extractor needs to be updated.
— Reply to this email directly, view it on GitHub https://github.com/extremecoders-re/nuitka-extractor/issues/9#issuecomment-2894669269, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAEA6LM7LOFKXHTUYAJCY6T27M4XZAVCNFSM6AAAAAB5PN4FMWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDQOJUGY3DSMRWHE . You are receiving this because you commented.Message ID: @.***>
-- John Hale [image: John Hale Logo] 212-812-9043 @.*** https://www.jbhale.com https://social.rhcp011235.me https://www.facebook.com/John.b.hale https://www.twitter.com/john011235 https://www.linkedin.com/in/johnhale/ https://www.instagram.com/rhcp011235 https://api.whatsapp.com/send?phone=rhcp011235
IMPORTANT: This email message is intended only for the use of the individual to whom, or entity to which, it is addressed and may contain information that is privileged, confidential and exempt from disclosure under applicable law. If you are NOT the intended recipient, you are hereby notified that any use, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please reply to the sender immediately and permanently delete this email.
I can upload the binary if you want, it's not a virus or anything, its a IOS tool kit
