ZyroExternal[.]exe

Resubmissions

30/09/2026, 02:59

260930-dgt5taxvfw

30/09/2026, 02:54

260930-deandsxt8j8

Sharing

Copy URL Twitter E-mail

General

Target
ZyroExternal.exe
Size 1.1MB
Sample260930-deandsxt8j
SHA256 eb412825dfc1a0b00e58b2d29a68c0bfeafbfc135df976f05c47d4df6fd9be3c
MD5 7c057277037147046a5c0405c3a3dfc9
SHA1 368308612d7e18abb223398a9edb9d1f7e3469b5
SHA512 abcbf2453efba210d8c9e0b2a9ea2ef4c8120b95a86b2fc673724a566becd167212d2b003cf444682116c5b38d4c2d905a996ad5d46fd870a91a325223f695d2
SSDEEP 24576:NYmSpPjTgslN310W48BKd95bVnUPEVSixgng+r:mL1Dj4nxVUALxgn
TLSH
T153459D45B2F400F8E47B9578DAB5611BEA72785017309ADF13D00A592F737E09BBBB22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZyroExternal.exe

File Explorer

ZyroExternal.exe

.exe 1.1MB

ZyroExternal.exe

IMPHASH 7167c96a8d233e4d26f09f7132a12f30
SHA256 eb412825dfc1a0b00e58b2d29a68c0bfeafbfc135df976f05c47d4df6fd9be3c
MD5 7c057277037147046a5c0405c3a3dfc9
SHA1 368308612d7e18abb223398a9edb9d1f7e3469b5
SHA512 abcbf2453efba210d8c9e0b2a9ea2ef4c8120b95a86b2fc673724a566becd167212d2b003cf444682116c5b38d4c2d905a996ad5d46fd870a91a325223f695d2
SSDEEP 24576:NYmSpPjTgslN310W48BKd95bVnUPEVSixgng+r:mL1Dj4nxVUALxgn
TLSH
T153459D45B2F400F8E47B9578DAB5611BEA72785017309ADF13D00A592F737E09BBBB22
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

630288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\zyro\Downloads\NeoExternal source.OGFNzip\ZyroExternal - Source\Build\Release\ZyroExternal.pdb

d3d11

D3D11CreateDevice

dcomp

DCompositionCreateDevice

d3dcompiler_47

D3DCompile

advapi32

ControlService CloseServiceHandle OpenSCManagerW DeleteService StartServiceW ChangeServiceConfigW GetTokenInformation OpenProcessToken OpenServiceW CreateServiceW

user32

GetForegroundWindow MessageBoxA SetProcessDPIAware GetClientRect GetAsyncKeyState SetActiveWindow IsWindow GetKeyState GetMessageExtraInfo GetCapture TrackMouseEvent GetKeyboardLayout LoadCursorW SetCapture SetCursor IsWindowUnicode ReleaseCapture SetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData ScreenToClient GetCursorPos DefWindowProcW GetWindowRect DestroyWindow SetWindowPos MonitorFromWindow IsWindowVisible SetWindowLongPtrW CreateWindowExW GetSystemMetrics UnregisterClassW GetWindowLongPtrW RegisterClassExW ShowWindow DispatchMessageW GetMonitorInfoW ClientToScreen PeekMessageW AttachThreadInput SetLayeredWindowAttributes SetFocus BringWindowToTop TranslateMessage ClipCursor PostQuitMessage GetDesktopWindow EnumDisplaySettingsW UpdateWindow SetForegroundWindow ShowCursor GetWindowThreadProcessId GetWindow EnumWindows

shell32

ShellExecuteW SHGetFolderPathW SHGetKnownFolderPath

kernel32

HeapReAlloc GetOEMCP GetACP IsValidCodePage OutputDebugStringW GetTimeZoneInformation ReadConsoleW SetFilePointerEx GetConsoleMode GetConsoleOutputCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW LoadLibraryExW InitializeCriticalSectionAndSpinCount HeapFree HeapAlloc UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext GetCommandLineW GetCommandLineA TerminateProcess ExitProcess IsProcessorFeaturePresent WriteConsoleW GetFileType GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId FindFirstFileExW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetCPInfo GetStringTypeW SetStdHandle SizeofResource SetConsoleCtrlHandler SetConsoleTextAttribute GetCurrentProcess GetStdHandle WriteFile GetModuleFileNameW FindResourceA WaitForSingleObject GetModuleHandleA CreateEventW Sleep GetTempPathA GetTickCount64 CreateFileA SetEvent LoadLibraryA LockResource CloseHandle FreeConsole LoadResource SetCurrentDirectoryW GetProcAddress GetModuleHandleW CreateProcessA CreateDirectoryA AllocConsole SetConsoleTitleW CreateDirectoryW FindFirstFileW FindNextFileW FindClose CreateFileW GetLastError DeleteFileW ReadFile GetFileSizeEx FindResourceW MultiByteToWideChar WideCharToMultiByte OutputDebugStringA GetLocalTime FlushFileBuffers GetFullPathNameW GetTempPathW GetFileAttributesW RtlUnwind OpenProcess GetExitCodeThread UnmapViewOfFile QueryPerformanceFrequency QueryPerformanceCounter DeviceIoControl VirtualQuery CreateToolhelp32Snapshot Process32NextW Process32FirstW Module32FirstW ReadProcessMemory Module32NextW GetExitCodeProcess GetCurrentThreadId WaitForSingleObjectEx GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA IsDBCSLeadByte FreeLibrary DecodePointer GetProcessHeap HeapSize SetEndOfFile LCMapStringEx EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW WakeAllConditionVariable EnterCriticalSection

ole32

CoTaskMemFree

imm32

ImmGetContext ImmSetCompositionWindow ImmReleaseContext ImmSetCandidateWindow