Nyx[.]exe | Triage

Resubmissions

14-08-2024 16:26

240814-txtf8awgkq 8

14-08-2024 16:25

240814-txfkcs1gqa 6

Sharing

General

Target

Nyx.exe
Size

4.8MB
MD5

2160b2f130898499895e342e29434db2
SHA1

e7d5e6bb5362b1c9b7f341546c1b801c35ac1071
SHA256

2a5a392717e8095eb3b0a0d4e5df01648e94f23db3973f8d1dfa4dbbf77900f8
SHA512

769b9d01f0c6e04777d5c36ee14f94258b693a48e00208836fe8f491822d073653ebb73d61ffc35352a3ecb4d4c77ddac19e6448cd8b9ca23f38b08e4372c3fb
SSDEEP

98304:gCadw7umchnKvJ8tSjpNd5Y/fDVrGY39Mp6KokPe/Ms6ni80Y:gCa4chKhCSjTdWjVxuQ//6i8/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nyx.exe

Files

Nyx.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Nyx.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ