NyxLauncher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NyxLauncher.exe
Size

2.4MB
MD5

08e49f89e51ed781fc7ce34110eea18a
SHA1

7c8e09d5fb22805b97cd9fedb9c0fa39ed10a75b
SHA256

16fb53415a85cfd7126d451c36cea40529aab5f86c5848f621517d539da40203
SHA512

ba6d8f7d022d80f9e77424291ec9fa1f33f02036f1a912d8ec971a744fadfeda88d4d39ce51e7b1bdcf925e21c9f2815224124ad79065f6e037e4886fa041a09
SSDEEP

49152:6JK5/JHxm7k97sZJC3FI/9o6psgs+BiC0BZCy9E7koGN0TF0Lzji:6JKNjm4RmJC1I/Rp/HBiC0BZCy9E7koN

Score

1^/10

Malware Config

Signatures

Files

NyxLauncher.exe
.exe windows x86

fd514c374242833ae6fa295cf7099568

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

Issuer

CN=thawte Primary Root CA,OU=Certification Services Division+OU=(c) 2006 thawte\, Inc. - For authorized use only,O=thawte\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

32:60:4f:5f:84:3c:56:36:28:b1:14:02:e3:7f:30:24
Certificate

Issuer

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Not Before

28/07/2020, 00:00

Not After

28/07/2023, 23:59

Subject

CN=Neosonyx Co.\, Ltd.,O=Neosonyx Co.\, Ltd.,L=Geumcheon-gu,ST=Seoul,C=KR

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

09/06/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:37:f7:ed:80:c7:ab:99:6f:a0:e0:14:c6:8f:0c:2a:db:de:3b:f6
Signer

Actual PE Digest

05:37:f7:ed:80:c7:ab:99:6f:a0:e0:14:c6:8f:0c:2a:db:de:3b:f6

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Neosonyx Co.\, Ltd.,O=Neosonyx Co.\, Ltd.,L=Geumcheon-gu,ST=Seoul,C=KR

15/06/2022, 04:33
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
ReadConsoleW
SetFilePointerEx
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetConsoleMode
GetConsoleCP
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
GetSystemInfo
HeapQueryInformation
UnhandledExceptionFilter
GetCommandLineA
GetFileType
FreeLibraryAndExitThread
ExitThread
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
LoadLibraryExA
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
GetCPInfo
LCMapStringEx
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetSystemTime
GetVersionExA
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObjectEx
ResetEvent
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTempPathW
InitializeSListHead
GetModuleHandleExW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetCurrentDirectoryW
lstrcpyW
lstrcmpiW
DuplicateHandle
UnlockFile
TerminateProcess
LockFile
GetVolumeInformationW
FlushFileBuffers
FindFirstFileW
FileTimeToSystemTime
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetLocaleInfoW
ResumeThread
SetThreadPriority
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
lstrcmpA
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleA
GetSystemDirectoryW
EncodePointer
CopyFileW
GlobalFree
GlobalSize
FindResourceExW
FindClose
OutputDebugStringA
SetFileAttributesA
SetEndOfFile
SetFilePointer
GetFullPathNameW
_lcreat
_lclose
GetModuleHandleW
GetDiskFreeSpaceExA
GlobalMemoryStatusEx
GetLogicalDriveStringsA
GetVersionExW
GetDriveTypeA
MulDiv
lstrcmpW
GlobalUnlock
GlobalLock
SetCurrentDirectoryW
FindResourceW
LoadResource
LoadLibraryW
GlobalAlloc
LockResource
CreateFileA
ReleaseMutex
CreateMutexW
SetLastError
SizeofResource
GetFileSize
DeleteFileW
DeleteFileA
InitializeCriticalSection
ReadFile
Sleep
GetProcessHeap
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
HeapFree
WriteFile
GetTickCount
CreateDirectoryA
WideCharToMultiByte
CreateProcessW
LocalFree
GetFileAttributesA
GetTickCount64
FormatMessageW
MultiByteToWideChar
GetFileAttributesW
GetModuleFileNameW
GetModuleFileNameA
CreateDirectoryW
GetLocalTime
SetEvent
CreateEventW
WaitForMultipleObjects
K32GetProcessMemoryInfo
WriteConsoleW
FreeConsole
OutputDebugStringW
GetStdHandle
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
EnterCriticalSection
SetUnhandledExceptionFilter
FreeLibrary
GetCurrentProcessId
GetProcAddress
CreateThread
CloseHandle
LoadLibraryA
GetCurrentThreadId
CreateFileW
WaitForSingleObject
SetErrorMode
GetCurrentProcess
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetCommandLineW
SetEnvironmentVariableW

user32

DestroyIcon
MapDialogRect
GetNextDlgTabItem
CreateDialogIndirectParamW
RealChildWindowFromPoint
GetActiveWindow
SendDlgItemMessageA
CopyImage
GetMenuItemInfoW
DestroyMenu
GetSysColorBrush
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetWindowThreadProcessId
IntersectRect
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetLastActivePopup
GetTopWindow
GetClassLongW
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsMenu
GetClassInfoW
RegisterClassW
GetMessageTime
GetMessagePos
PeekMessageW
IsWindowEnabled
GetDlgCtrlID
CheckDlgButton
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
UnionRect
EqualRect
OffsetRect
EmptyClipboard
TrackMouseEvent
SystemParametersInfoW
UpdateWindow
DialogBoxParamW
ShowWindow
CreateDialogParamW
TranslateMessage
PtInRect
GetCursorPos
InflateRect
SetWindowRgn
FrameRect
KillTimer
EnableWindow
IsRectEmpty
SetRectEmpty
LoadImageA
EnumDisplayDevicesW
GetWindowLongW
GetWindowTextLengthW
DefWindowProcW
GetKeyState
CallWindowProcW
PostMessageW
GetWindow
GetFocus
LoadImageW
ShowOwnedPopups
DeleteMenu
GetNextDlgGroupItem
WindowFromPoint
DrawFocusRect
DrawIconEx
GetIconInfo
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
DispatchMessageW
MapVirtualKeyW
GetMessageW
SetWindowsHookExW
SendNotifyMessageW
UnhookWindowsHookEx
GetAsyncKeyState
UnregisterClassW
EndDialog
CallNextHookEx
SendMessageW
CreateWindowExW
SetWindowPos
GetWindowRect
wsprintfA
IsDialogMessageW
GetWindowTextW
EndPaint
BeginPaint
ReleaseDC
IsIconic
InvalidateRect
ReleaseCapture
RegisterWindowMessageW
GetParent
GetClassInfoExW
GetDesktopWindow
PostQuitMessage
GetDlgItem
GetClientRect
SetWindowLongW
SetCapture
GetClassNameW
LoadCursorW
LoadIconW
GetUpdateRect
CharNextW
SetFocus
LockWindowUpdate
CreateAcceleratorTableW
MoveWindow
GetSysColor
SetWindowTextA
IsChild
GetWindowTextA
DestroyAcceleratorTable
DrawStateW
SetClassLongW
SetParent
DrawEdge
ClientToScreen
CopyRect
RedrawWindow
InvalidateRgn
IsWindow
LoadStringW
DrawIcon
RegisterClassExW
SetWindowTextW
GetSystemMetrics
ScreenToClient
FillRect
MessageBoxW
CharUpperW
GetKeyNameTextW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetCursor
GetDC
DestroyWindow
DrawFrameControl
IsZoomed
GetSystemMenu
SetClipboardData
BringWindowToTop
SetCursorPos
CopyIcon
UpdateLayeredWindow
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CopyAcceleratorTableW
SetRect
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IsClipboardFormatAvailable
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
SetTimer

gdi32

ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RestoreDC
SaveDC
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
Escape
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
Polygon
Polyline
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
CreateDCW
CopyMetaFileW
FrameRgn
CreateRoundRectRgn
CreatePolygonRgn
CreateFontIndirectW
CreateBrushIndirect
CreateRectRgn
SelectClipRgn
RectVisible
SetDIBitsToDevice
GetDIBits
BitBlt
CreateCompatibleBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
CreateFontW
GetStockObject
GetDeviceCaps
DeleteDC
SetTextColor
GetObjectW
SetBkColor
DeleteObject
CreateRectRgnIndirect
StretchDIBits
CreateSolidBrush

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW

shell32

ShellExecuteA
FindExecutableW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
DragFinish
DragQueryFileW
SHGetDesktopFolder
ShellExecuteW

ole32

CoGetClassObject
OleUninitialize
CoInitialize
CoTaskMemAlloc
StringFromGUID2
CoUninitialize
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoInitializeEx
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
OleLockRunning
CLSIDFromString
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CLSIDFromProgID
CoCreateInstance

oleaut32

VariantTimeToSystemTime
SystemTimeToVariantTime
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantInit
SysFreeString
SysAllocString
VariantChangeType
VariantClear
VariantCopy
VarBstrFromDate

winmm

PlaySoundW

winhttp

WinHttpCrackUrl
WinHttpConnect
WinHttpReceiveResponse
WinHttpOpen
WinHttpReadData
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpSendRequest

msimg32

AlphaBlend
TransparentBlt

comctl32

ord17

shlwapi

PathStripToRootW
PathIsUNCW
PathFindFileNameW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindExtensionW

uxtheme

DrawThemeParentBackground
DrawThemeText
CloseThemeData
DrawThemeBackground
GetThemeColor
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
GetThemePartSize
GetCurrentThemeName
OpenThemeData

ws2_32

inet_pton
closesocket
WSACleanup
WSAStartup
send
socket
connect
recv
htons
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent

iphlpapi

GetAdaptersInfo

bugtrapu

BT_UninstallSehFilter
BT_SetAppName
BT_SetActivityType
BT_SetSupportServer
BT_SetFlags
BT_SetAppVersion
BT_InstallSehFilter
BT_AddLogFile

steam_api

SteamAPI_RunCallbacks
SteamInternal_FindOrCreateUserInterface
SteamAPI_Init
SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamAPI_GetHSteamUser
SteamAPI_Shutdown
SteamInternal_ContextInit
SteamAPI_RestartAppIfNecessary

ddraw

DirectDrawCreate

gdiplus

GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipAlloc
GdipDrawImageI
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdiplusShutdown
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePaletteSize

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 409KB - Virtual size: 408KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd514c374242833ae6fa295cf7099568

Code Sign

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cbCertificate

Extended Key Usages

Key Usages

32:60:4f:5f:84:3c:56:36:28:b1:14:02:e3:7f:30:24Certificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0Certificate

Extended Key Usages

Key Usages

05:37:f7:ed:80:c7:ab:99:6f:a0:e0:14:c6:8f:0c:2a:db:de:3b:f6Signer

Signature Validations

Verification

15/06/2022, 04:33 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

winmm

winhttp

msimg32

comctl32

shlwapi

uxtheme

ws2_32

iphlpapi

bugtrapu

steam_api

ddraw

gdiplus

oleacc

imm32

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 409KB - Virtual size: 408KB

.data Size: 29KB - Virtual size: 51KB

.rsrc Size: 35KB - Virtual size: 34KB

.reloc Size: 149KB - Virtual size: 148KB

71:a0:b7:36:95:dd:b1:af:c2:3b:2b:9a:18:ee:54:cb
Certificate

32:60:4f:5f:84:3c:56:36:28:b1:14:02:e3:7f:30:24
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

01:24:0a:fb:1e:38:0b:8a:16:f1:4b:71:9d:f4:d3:c0
Certificate

05:37:f7:ed:80:c7:ab:99:6f:a0:e0:14:c6:8f:0c:2a:db:de:3b:f6
Signer

15/06/2022, 04:33
Valid: false

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 409KB - Virtual size: 408KB

.data
Size: 29KB - Virtual size: 51KB

.rsrc
Size: 35KB - Virtual size: 34KB

.reloc
Size: 149KB - Virtual size: 148KB