Nyx_dump[.]justify[.]exe | Triage

Sharing

General

Target

Nyx_dump.justify.exe
Size

907KB
MD5

da9e36a5657e7dc7007b0cab9b5d3a7d
SHA1

8cc7d5c06567aa96dda5621bb5da6bac862b62b0
SHA256

bc806f5c92967705981e1fee4dff7c2d015d5f3643fe87f721f2ee3cc7b398d3
SHA512

276aebcfe7f60e0ec4d8d7d3b2d541215a50584a9fa1ba1754cbc526496f14af110f9d823c7d89935797890bca4feb4d6e67eb9c58080ae4d0a657192081fc89
SSDEEP

24576:lb3wFKk35QU21Fq1r5lnr7sC3cXlBbPb3cgl:lb3wFKk3R21Fcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nyx_dump.justify.exe

Files

Nyx_dump.justify.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.0?#
Size: - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tt7
Size: 714KB - Virtual size: 720KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ