NYXAPi Files[.]zip

Resubmissions

23/07/2024, 15:38

240723-s21knaxdjn 8

23/07/2024, 15:32

240723-syt9gaxbrq 9

Sharing

Copy URL Twitter E-mail

General

Target

NYXAPi Files.zip
Size

27.9MB
MD5

f63cee93393b663590c64c4d5de6bcaa
SHA1

f68cda4e1234002babf1d6a492d4dedbcb392c3d
SHA256

45a467d04454e66655a21aaf4e88a75ce95710a41822b682d67fa277fd8bf721
SHA512

4559a87f4f7257bb6f6dbebc8ff02980e09f4b1133ef23b4ec3aa6b44c853cc78a272ea8d593333d297b2bf21b14429a4b19ab15741c0018dc029bcb7d17d5d5
SSDEEP

786432:NzLmCe2/PG6A2LIMUW82iY2JFnwL22VvUCb0NWd0e:NzL82Wk5UW8pXvwL27CYNO0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/NYXAPi Files/NyxAPI.dll
unpack001/NYXAPi Files/nyxbeta.exe

Files

NYXAPi Files.zip
.zip
NYXAPi Files/NyxAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ourko\source\repos\NyxAPI\obj\Debug\NyxAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
NYXAPi Files/nyxbeta.exe
.exe windows:6 windows x64 arch:x64

774bf9db719d0ecf164c66fc4d7d442d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceFrequency
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetClipboardData

msvcp140

?good@ios_base@std@@QEBA_NXZ

ws2_32

WSAStartup

wininet

InternetCloseHandle

ntdll

RtlVirtualUnwind

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit

api-ms-win-crt-stdio-l1-1-0

fread

api-ms-win-crt-string-l1-1-0

isalpha

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-math-l1-1-0

fmod

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-time-l1-1-0

_difftime64

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 258KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.q`M
Size: - Virtual size: 19.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.`I@
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

./aE
Size: 32.5MB - Virtual size: 32.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 8KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 512B - Virtual size: 12B

774bf9db719d0ecf164c66fc4d7d442d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

ws2_32

wininet

ntdll

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 1.1MB

.rdata Size: - Virtual size: 258KB

.data Size: - Virtual size: 49KB

.pdata Size: - Virtual size: 40KB

.q`M Size: - Virtual size: 19.4MB

.`I@ Size: 4KB - Virtual size: 3KB

./aE Size: 32.5MB - Virtual size: 32.5MB

.rsrc Size: 512B - Virtual size: 469B

.text
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: - Virtual size: 1.1MB

.rdata
Size: - Virtual size: 258KB

.data
Size: - Virtual size: 49KB

.pdata
Size: - Virtual size: 40KB

.q`M
Size: - Virtual size: 19.4MB

.`I@
Size: 4KB - Virtual size: 3KB

./aE
Size: 32.5MB - Virtual size: 32.5MB

.rsrc
Size: 512B - Virtual size: 469B