zenith_macros_tauri[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
zenith_macros_tauri.exe
Size 15.5MB
Sample260601-cdeqaabt8s
SHA256 c42f48adfa4b5a35bf22983931b7a3968c8305075c1831c6b8616cb58294f490
MD5 0cf6c9a75856cef6a507a66b823bfab9
SHA1 e906bac6105452037011547839db62508f524dad
SHA512 a8b7cacd75359b355c079353be565949db749f58151622226c8c44423519fbf6bd0a57ebaf75b1bd912fb63379d5b4d68fca1a20e807e13f1fb30e00d696f4d1
SSDEEP 393216:7Yhr5u6+JlzV8ib9llszfZ5Bq9SsLOdwPr4w:7Yhr5u6+JlzV8ibbY5BS5KdwPk
TLSH
T1C5F66A257B5B996CD09BC47483478A624D7130CB0B36B9FF448992383F6ABF56F38219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zenith_macros_tauri.exe

File Explorer

zenith_macros_tauri.exe

.exe 15.5MB

zenith_macros_tauri.exe

IMPHASH dfd96f54c786dede4fd2d1b6d8408a77
SHA256 c42f48adfa4b5a35bf22983931b7a3968c8305075c1831c6b8616cb58294f490
MD5 0cf6c9a75856cef6a507a66b823bfab9
SHA1 e906bac6105452037011547839db62508f524dad
SHA512 a8b7cacd75359b355c079353be565949db749f58151622226c8c44423519fbf6bd0a57ebaf75b1bd912fb63379d5b4d68fca1a20e807e13f1fb30e00d696f4d1
SSDEEP 393216:7Yhr5u6+JlzV8ib9llszfZ5Bq9SsLOdwPr4w:7Yhr5u6+JlzV8ibbY5BS5KdwPk
TLSH
T1C5F66A257B5B996CD09BC47483478A624D7130CB0B36B9FF448992383F6ABF56F38219
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7080704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

zenith_macros_tauri.pdb

bcryptprimitives

ProcessPrng

advapi32

RegGetValueW SystemFunction036 EventUnregister EventWriteTransfer EventSetInformation RegCloseKey RegQueryValueExW RegOpenKeyExW EventRegister

ntdll

NtDeviceIoControlFile NtCreateNamedPipeFile NtOpenFile RtlNtStatusToDosError NtCancelIoFileEx NtWriteFile NtReadFile RtlGetVersion

kernel32

Sleep GetModuleHandleA GetModuleHandleW GetUserDefaultUILanguage LCIDToLocaleName GetProcAddress CloseHandle ReleaseSRWLockExclusive GetCurrentThreadId RtlPcToFileHeader RaiseException GetSystemTimeAsFileTime FindNextFileW GetTempPathW SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar SetEnvironmentVariableW DeleteFileW GetFinalPathNameByHandleW ReleaseMutex CreateMutexA FlsAlloc FlsGetValue WaitForSingleObjectEx AcquireSRWLockExclusive WideCharToMultiByte SwitchToThread OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetLastError GetProcessHeap HeapFree LoadLibraryExW FreeLibrary GetSystemInfo ExitProcess FindClose FlsSetValue FindFirstFileExW FlsFree GetCommandLineW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetStdHandle GetExitCodeProcess CreateProcessW GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW EncodePointer WakeAllConditionVariable GetFileInformationByHandleEx InitializeSListHead GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LoadLibraryExA DuplicateHandle HeapAlloc GetCurrentProcess SetUnhandledExceptionFilter ReadFileEx FormatMessageW GetCurrentProcessId LoadLibraryW CreateThread QueryPerformanceCounter CreateFileW QueryPerformanceFrequency HeapReAlloc SetFileTime SetFileInformationByHandle MoveFileExW GetFullPathNameW SetLastError SleepEx WriteFileEx FreeEnvironmentStringsW RtlUnwindEx WaitForSingleObject CompareStringOrdinal GetEnvironmentVariableW LoadLibraryA lstrlenW SleepConditionVariableSRW GetConsoleMode GetFileInformationByHandle GetFileAttributesW InitializeCriticalSectionEx GetQueuedCompletionStatusEx CreateIoCompletionPort PostQueuedCompletionStatus DeleteCriticalSection

user32

ShowCursor GetWindowRect GetClipCursor IsProcessDPIAware ValidateRect ChangeDisplaySettingsExW SetWindowPlacement GetWindowPlacement InvalidateRgn IsWindowEnabled GetSystemMenu EnableWindow LoadCursorW SetWindowRgn EnableMenuItem RegisterRawInputDevices SetWindowLongW GetUpdateRect ReleaseCapture DestroyIcon SetCapture SetWindowLongPtrW MsgWaitForMultipleObjectsEx GetParent GetWindowLongPtrW UnhookWindowsHookEx SetWindowsHookExW ClipCursor RegisterWindowMessageA SetParent MapWindowPoints RegisterTouchWindow GetWindow MonitorFromPoint SetCursorPos UpdateWindow SetFocus IsWindow AdjustWindowRectEx ShowWindow FlashWindowEx EnumDisplayMonitors SetPropW GetActiveWindow SystemParametersInfoA GetKeyboardLayout DrawTextW GetWindowDC OffsetRect GetMenuBarInfo DestroyMenu DrawIconEx EnumWindows CheckMenuItem GetMenuItemInfoW RemoveMenu CreatePopupMenu CreateMenu SetMenuItemInfoW AppendMenuW InsertMenuW TrackPopupMenu PostQuitMessage CreateAcceleratorTableW SetForegroundWindow IsWindowVisible DestroyAcceleratorTable DrawMenuBar SetMenu CreateIcon GetKeyboardState MapVirtualKeyExW SetCursor GetWindowTextLengthW GetWindowTextW CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent SystemParametersInfoW ToUnicodeEx FillRect GetKeyState GetSystemMetrics GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos ClientToScreen GetClientRect GetWindowLongW ScreenToClient DefWindowProcW PeekMessageW DispatchMessageW GetMessageW IsIconic SendMessageW RedrawWindow AdjustWindowRect SetWindowTextW TranslateAcceleratorW SetWindowDisplayAffinity PostThreadMessageW ReleaseDC GetDC GetWindowInfo MapVirtualKeyW GetAsyncKeyState SendInput CallNextHookEx PostMessageW GetClassNameW GetForegroundWindow FindWindowExW DestroyWindow EnumChildWindows GetMenu DispatchMessageA TranslateMessage GetMessageA SetWindowPos CreateWindowExW RegisterClassExW GetRawInputData InvalidateRect

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance CoTaskMemAlloc CoUninitialize CoTaskMemFree OleInitialize RegisterDragDrop RevokeDragDrop CoInitializeEx

comctl32

RemoveWindowSubclass TaskDialogIndirect SetWindowSubclass DefSubclassProc

shlwapi

SHCreateMemStream AssocQueryStringW

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

gdi32

BitBlt CombineRgn GetDeviceCaps CreateCompatibleDC CreateDIBSection CreateRectRgn SelectObject SetTextColor SetBkMode DeleteObject CreateSolidBrush GetPixel DeleteDC

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

shell32

DragFinish SHCreateItemFromParsingName SHAppBarMessage DragQueryFileW ShellExecuteW SHGetKnownFolderPath

oleaut32

GetErrorInfo SetErrorInfo SysStringLen SysFreeString

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

trunc floor pow round roundf __setusermatherr

api-ms-win-crt-string-l1-1-0

strcpy_s _wcsicmp wcslen wcscmp

api-ms-win-crt-convert-l1-1-0

_wtoi wcstol _ultow_s

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _set_app_type _seh_filter_exe abort _initialize_narrow_environment _get_initial_narrow_environment terminate _initterm _initterm_e exit _exit _crt_atexit __p___argc __p___argv _cexit _c_exit _register_thread_local_exe_atexit_callback _register_onexit_function _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode calloc free malloc