Zyntr3x Macro v1[.]2[.]bin

Sharing

Copy URL Twitter E-mail

General

Target
Zyntr3x Macro v1.2.bin
Size 8.9MB
Sample260701-1bm6msgw2t
SHA256 98c2aa45af3dedd5e772b52baddd76477859014a40eb77c9f896095c25310d2f
MD5 af3ce8c886c770e2b239d26454bc8c53
SHA1 9008fbfe874aacef027c89a6f2186f7254a7b3bd
SHA512 025bedd7f0343aec85db238efae60b7f04531c876d2eae8bb27271a5e10ecdae1cb45521dbf1184c15344b58c68e9f436fb64c64d2d4a911b7988a99832c632f
SSDEEP 49152:wdMSmbRpg/Kl140f7W6GF9FM6m386VppNd1nGhqqdHN+9b7hjR7ZteeN3CXCUZ8z:h1reZj8W1yiNVw397DSKXqynLLZyI
TLSH
T15496D5216A5F996CD08BC475834B8A724D6130CB0B35B9FF449896383F6EBF46F28359
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Zyntr3x Macro v1.2.bin

File Explorer

Zyntr3x Macro v1.2.bin

.exe 8.9MB

Zyntr3x Macro v1.2.bin

IMPHASH 53ce4d160ec14306fcf26f739cbeab34
SHA256 98c2aa45af3dedd5e772b52baddd76477859014a40eb77c9f896095c25310d2f
MD5 af3ce8c886c770e2b239d26454bc8c53
SHA1 9008fbfe874aacef027c89a6f2186f7254a7b3bd
SHA512 025bedd7f0343aec85db238efae60b7f04531c876d2eae8bb27271a5e10ecdae1cb45521dbf1184c15344b58c68e9f436fb64c64d2d4a911b7988a99832c632f
SSDEEP 49152:wdMSmbRpg/Kl140f7W6GF9FM6m386VppNd1nGhqqdHN+9b7hjR7ZteeN3CXCUZ8z:h1reZj8W1yiNVw397DSKXqynLLZyI
TLSH
T15496D5216A5F996CD08BC475834B8A724D6130CB0B35B9FF449896383F6EBF46F28359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6478272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

zyntr3x_macro.pdb

bcryptprimitives

ProcessPrng

advapi32

EventWriteTransfer RegCloseKey RegOpenKeyExW SystemFunction036 RegGetValueW EventRegister EventSetInformation RegQueryValueExW EventUnregister

ntdll

NtCreateNamedPipeFile RtlNtStatusToDosError NtWriteFile RtlGetVersion NtOpenFile

kernel32

FindNextFileW GetTempPathW SetWaitableTimer CreateWaitableTimerExW GetConsoleOutputCP WriteConsoleW MultiByteToWideChar FlsFree SetEnvironmentVariableW DeviceIoControl GetFinalPathNameByHandleW ReleaseMutex CreateMutexA WaitForSingleObjectEx WideCharToMultiByte SwitchToThread GetSystemInfo ExitProcess FindClose FindFirstFileExW GetCommandLineW GetCurrentDirectoryW GetCurrentThread SetThreadStackGuarantee AddVectoredExceptionHandler CreateDirectoryW GetStdHandle FlsSetValue GetWindowsDirectoryW GetSystemDirectoryW GetEnvironmentStringsW GetFileInformationByHandleEx LoadLibraryA GetSystemTimePreciseAsFileTime RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext FlsGetValue FlsAlloc DuplicateHandle GetCurrentProcess lstrlenW GetFileAttributesW GetModuleFileNameW GetLastError LoadLibraryExW FreeLibrary GetFileInformationByHandle GetConsoleMode RaiseException RtlPcToFileHeader LCIDToLocaleName ReadFileEx GetCurrentThreadId GetCurrentProcessId SleepConditionVariableSRW CreateThread QueryPerformanceCounter QueryPerformanceFrequency HeapReAlloc SetFileTime WakeAllConditionVariable AcquireSRWLockExclusive GetUserDefaultUILanguage ReleaseSRWLockExclusive GetSystemTimeAsFileTime GetFullPathNameW OutputDebugStringA OutputDebugStringW GetProcessHeap HeapFree EncodePointer InitializeSListHead SetUnhandledExceptionFilter GetModuleHandleW SetFileInformationByHandle SetLastError SleepEx RtlUnwindEx WriteFileEx WaitForSingleObject FreeEnvironmentStringsW CompareStringOrdinal DeleteCriticalSection CreateProcessW LoadLibraryW GetEnvironmentVariableW GetModuleHandleA LoadLibraryExA Sleep HeapAlloc GetProcAddress CloseHandle CreateFileW InitializeCriticalSectionEx FormatMessageW

user32

DestroyWindow EnumChildWindows AdjustWindowRect RegisterTouchWindow PostMessageW SetWindowPos RedrawWindow VkKeyScanW DrawTextW GetWindowDC OffsetRect GetMenuBarInfo IsIconic DestroyMenu GetWindowThreadProcessId DrawIconEx CheckMenuItem RemoveMenu CreatePopupMenu CreateMenu SetMenu DrawMenuBar SetMenuItemInfoW AppendMenuW MapVirtualKeyW GetMessageW InsertMenuW TranslateMessage TrackPopupMenu PostQuitMessage CreateAcceleratorTableW DestroyAcceleratorTable GetMenuItemInfoW CreateIcon GetKeyboardState MapVirtualKeyExW ToUnicodeEx DispatchMessageW PostThreadMessageW CreateWindowExW GetMenu IsWindowVisible GetRawInputData GetKeyboardLayout EnumDisplayMonitors MonitorFromPoint SetWindowTextW GetWindowTextW GetWindowTextLengthW SendInput SetForegroundWindow VkKeyScanExW DestroyIcon DefWindowProcW ClientToScreen SystemParametersInfoA SetPropW SetWindowLongW EnableMenuItem GetSystemMenu ClipCursor GetClipCursor ShowCursor RegisterClassExW RegisterRawInputDevices ChangeDisplaySettingsExW PeekMessageW ReleaseCapture SetWindowDisplayAffinity SetWindowPlacement MsgWaitForMultipleObjectsEx GetTouchInputInfo CloseTouchInputHandle RegisterWindowMessageA GetWindowPlacement InvalidateRgn GetAsyncKeyState SetParent MapWindowPoints GetWindow SetFocus ShowWindow ReleaseDC GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn PeekMessageA EnableWindow IsWindowEnabled IsProcessDPIAware GetDC GetKeyState SetCapture RegisterClassW UnregisterHotKey RegisterHotKey DispatchMessageA GetMessageA TranslateAcceleratorW SendMessageW GetUpdateRect ValidateRect TrackMouseEvent SystemParametersInfoW FillRect GetMonitorInfoW MonitorFromRect MonitorFromWindow GetCursorPos GetClientRect GetWindowLongW ScreenToClient GetForegroundWindow GetSystemMetrics IsWindow AdjustWindowRectEx FlashWindowEx GetActiveWindow UpdateWindow InvalidateRect SetCursorPos LoadCursorW SetCursor

ole32

CoCreateFreeThreadedMarshaler CoInitializeEx CoUninitialize CoCreateInstance RevokeDragDrop CoInitialize RegisterDragDrop OleInitialize

comctl32

RemoveWindowSubclass SetWindowSubclass TaskDialogIndirect DefSubclassProc

shlwapi

SHCreateMemStream

gdi32

CombineRgn SetTextColor CreateSolidBrush BitBlt CreateRectRgn DeleteObject CreateDIBSection SelectObject DeleteDC GetDeviceCaps CreateCompatibleDC SetBkMode

shell32

DragQueryFileW ShellExecuteW DragFinish SHAppBarMessage SHGetKnownFolderPath ShellExecuteExW SHOpenFolderAndSelectItems ILCreateFromPathW ILFree

combase

CoTaskMemAlloc CoTaskMemFree

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow DwmGetWindowAttribute

oleaut32

SysStringLen SysFreeString GetErrorInfo SetErrorInfo

bcrypt

BCryptGenRandom

api-ms-win-crt-math-l1-1-0

roundf floor __setusermatherr round trunc pow

api-ms-win-crt-string-l1-1-0

strcpy_s _wcsicmp wcscmp wcslen

api-ms-win-crt-convert-l1-1-0

_ultow_s _wtoi wcstol

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment _initialize_narrow_environment _register_onexit_function _initterm _initterm_e exit _exit __p___argc __p___argv abort _cexit _c_exit _register_thread_local_exe_atexit_callback terminate _set_app_type _seh_filter_exe _crt_atexit _configure_narrow_argv _initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh _set_new_mode calloc