e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb
Static task
static1
General
-
Target
NYX 2.3 FIXED.zip
-
Size
40.9MB
-
MD5
316dd5911f24770593d429bf488685a0
-
SHA1
451e77bd8a7335f6f70327918f4f930ba143e68a
-
SHA256
b9f068e8be7ddccafc9eea4c2af7d5079c7ce8b1ce6c5621fac5722098f49337
-
SHA512
3445c83d79f3e30e02ddd9fefd5487b2b751b535b540868928706e4d8c9cf7b16e2f0f301398af5456fb934498814e63e03da7be8999bcefa32d59a044a7e1ec
-
SSDEEP
786432:3FivtbMFOLxLM7fiRiO/9j5XqgWgomSZF2vZ74p79jVx:Vi/ufiRi+91XeUSz0Z74h9L
Malware Config
Signatures
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/Debug/MetroFramework.Design.dll unpack001/Debug/MetroFramework.Fonts.dll unpack001/Debug/MetroFramework.dll unpack001/Debug/MoonSharp.Interpreter.dll unpack001/Debug/Nyx.exe unpack001/Debug/bin/monaco/vs/base/worker/nyxbeta.exe
Files
-
NYX 2.3 FIXED.zip.zip .js polyglot
-
Debug/MetroFramework.Design.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/MetroFramework.Fonts.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 654KB - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/MetroFramework.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 342KB - Virtual size: 342KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/MoonSharp.Interpreter.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Z:\git\my\moonsharp\src\MoonSharp.Interpreter\_Projects\MoonSharp.Interpreter.net40-client\obj\Release\MoonSharp.Interpreter.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 355KB - Virtual size: 355KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Debug/Nyx.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wt< Size: - Virtual size: 403KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.a4y Size: 709KB - Virtual size: 709KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Debug/bin/monaco/Monaco.html.js
-
Debug/bin/monaco/vs/base/worker/nyxbeta.exe.exe windows:6 windows x64 arch:x64
4faa7a0d1f3d42cfbd2a7710a958485d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetForegroundWindow
msvcp140
?good@ios_base@std@@QEBA_NXZ
wininet
InternetCloseHandle
ntdll
RtlVirtualUnwind
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
api-ms-win-crt-runtime-l1-1-0
_cexit
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-string-l1-1-0
isgraph
api-ms-win-crt-heap-l1-1-0
_aligned_malloc
api-ms-win-crt-math-l1-1-0
log10
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-time-l1-1-0
strftime
api-ms-win-crt-filesystem-l1-1-0
_lock_file
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.SKID0 Size: - Virtual size: 21.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.SKID1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.SKID2 Size: 35.4MB - Virtual size: 35.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Debug/bin/monaco/vs/base/worker/workerMain.js.js
-
Debug/bin/monaco/vs/basic-languages/lua/lua.js
-
Debug/bin/monaco/vs/editor/contrib/suggest/media/String_16x.svg
-
Debug/bin/monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
-
Debug/bin/monaco/vs/editor/editor.main.css
-
Debug/bin/monaco/vs/editor/editor.main.js.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.de.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.es.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.fr.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.it.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.ja.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.ko.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.ru.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.zh-cn.js
-
Debug/bin/monaco/vs/editor/editor.main.nls.zh-tw.js
-
Debug/bin/monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
-
Debug/bin/monaco/vs/loader.js.js
-
Debug/scripts/CamFly (Press M To Enable).txt
-
Debug/scripts/Dex v2.txt.js
-
Debug/scripts/FE Animation.txt
-
Debug/scripts/Fly (Press E).txt
-
Debug/scripts/HipHeight.txt
-
Debug/scripts/Infinite Jump.txt
-
Debug/scripts/JumpPower.txt
-
Debug/scripts/NoClip (Hold V).txt
-
Debug/scripts/RevizAdmin.txt
-
Debug/scripts/WalkSpeed.txt
-
Debug/scripts/[FE] Dab.txt
-
Debug/scripts/[FE] Fling (R15).txt
-
Debug/scripts/[FE] Fling (R6).txt
-
Debug/scripts/[FE] Flood Script.txt
-
Debug/scripts/[FE] Funny.txt
-
Debug/scripts/clickdrag.txt
-
Debug/scripts/fe kill.txt
-
Debug/scripts/hello world.txt
-
Debug/scripts/mewing.txt
-
Debug/scripts/qClickDelete.txt
-
Debug/scripts/qToTP.txt
-
Debug/scripts/scriptrandom.lua
-
Debug/scripts/sit script.txt
-
Debug/workspace/DONOTTOUCH.lua
-
Debug/workspace/ISWHOLESCRIPT.txt
-
Debug/workspace/KI_README.txt
-
Debug/workspace/KI_Scripts/Welcome.txt