ZynovaV1[.]1[.]1[.]zip

Resubmissions

04/11/2026, 23:43

261104-3q298a1w4j5

04/11/2026, 23:38

261104-3mt5fa1w2p5

Sharing

Copy URL Twitter E-mail

General

Target
ZynovaV1.1.1.zip
Size 47.4MB
Sample261104-3mt5fa1w2p
SHA256 a38445b8edee8403ba83377d41485cdbb8a727d500d63249c2a61006c9fad0b5
MD5 756874c03acca8642ab090c9eaa38cc2
SHA1 7f21f4826cdde61ff6f807640c70de3b60079197
SHA512 6a35fc33bdfd8cc1af631f900ef44cbd7ae2d77a1b596537119604af805ac4b8590538b4fe748358fc29c8add1cc32ed1814f14229c57105ea1f4021217290fe
SSDEEP 786432:1Zt3lmqFjKoOxuxSyBra1ieN4M5dzccFWDbKaVTCfvEoCILG/7tM8xbHy/hZaG7:1Zt3lmqFkYxra1NNvJ74DbKaVGfcIqzG
TLSH
T1E2B733B15216F4CCECEC258F5041948E55702A22BD5E691CB19643232E9EEE27CFBCB7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Injector.exe
unpack001/Zynova.exe
unpack001/ZynovaModule.dll

File Explorer

ZynovaV1.1.1.zip

.zip 47.4MB
Injector.exe

.exe 25.9MB
Zynova.exe

.exe 27.6MB
ZynovaModule.dll

.dll 3.3MB

ZynovaV1.1.1.zip

SHA256 a38445b8edee8403ba83377d41485cdbb8a727d500d63249c2a61006c9fad0b5
MD5 756874c03acca8642ab090c9eaa38cc2
SHA1 7f21f4826cdde61ff6f807640c70de3b60079197
SHA512 6a35fc33bdfd8cc1af631f900ef44cbd7ae2d77a1b596537119604af805ac4b8590538b4fe748358fc29c8add1cc32ed1814f14229c57105ea1f4021217290fe
SSDEEP 786432:1Zt3lmqFjKoOxuxSyBra1ieN4M5dzccFWDbKaVTCfvEoCILG/7tM8xbHy/hZaG7:1Zt3lmqFkYxra1NNvJ74DbKaVGfcIqzG
TLSH
T1E2B733B15216F4CCECEC258F5041948E55702A22BD5E691CB19643232E9EEE27CFBCB7
MD5 SHA1 SHA512 SSDEEP TLSH

Injector.exe

IMPHASH 51701a1b2a6ea8357298037df6574a50
SHA256 375374945fd7379efac3d8bebbefb2c6bb3ad576d62a4bc1fad07808251978b3
MD5 d4a4e18838325b3d77c578ee48df1f47
SHA1 dc623438230f017e7847c2835957cdcc392c7ed3
SHA512 c3bd200205b61d9206cf51a53aebd29d4fbe4d6c4c3da488a67dfb2fb48a8ca878e6744ac11ede1b26197263ef1d95c2b5ad017b3c27e91576734b359797590a
SSDEEP 786432:C3qpYTl/m879C4uvSX8IF2fB+0YRkzHwfu:CeYTl/m87UaLC+0Y+bZ
TLSH
T1A257238B68D5E2F4D3D34A0092CF13DA97D271DBC5DA561E11C6A8033521EDB8B8AD3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

21580187

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

924KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

984B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.-E-

Size

Virtual Size

15.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.!cu

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.X*U

Size

25.9MB

Virtual Size

25.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

673B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

260B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Zynova.exe

IMPHASH 6afa3edf31c10731c3b40634992779a0
SHA256 75e751676f5eb432f0f082b3776da6954353a2ed12d8f7f750ac3e4a666610e2
MD5 da4f8023dec0db8623ef1fa4d0ae99d2
SHA1 0429f1b7582e828e4d54b1555bd918a54bae2bc3
SHA512 71972c85d3fcfaf8a2aaff04f83506831dde145eee76f5f99df96981ed7dc65bf1398ccb55f3e11e1bef23c51ab5b0d968820b0f2addc7411d6856d360d387dc
SSDEEP 393216:cXAAbVuXWl6UtwFB8Z8JE20UTc9pk2wwzwU+3fMrQdi+WRzwUIt+GlxwhoHm:cXAA8fB8i9Tc9pk2wwzwj3fAjRs+G
TLSH
T1395723A757DAA3C4E7C21844658542DA36C1A8CDC4FDC82D3ACB5C026934DFB9989EF3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22262870

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcryptprimitives

ProcessPrng

ntdll

NtCreateNamedPipeFile

kernel32

GetProcessHeap RtlUnwindEx

user32

GetMessageA

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle

shell32

SHGetStockIconInfo

combase

CoCreateFreeThreadedMarshaler

comctl32

RemoveWindowSubclass

gdi32

DeleteDC

oleaut32

GetErrorInfo

imm32

ImmGetContext

ole32

RevokeDragDrop

advapi32

RegQueryValueExW EventWriteTransfer

dwmapi

DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

ws2_32

WSACleanup

api-ms-win-crt-math-l1-1-0

floor

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-convert-l1-1-0

_ultow_s

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Name

.text

Size

Virtual Size

3.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

743KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

55KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.3jc

Size

Virtual Size

16.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.>2Z

Size

1024B

Virtual Size

872B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.g<>

Size

27.6MB

Virtual Size

27.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

ZynovaModule.dll

IMPHASH 2602736612ffb9115a184330baa541f1
SHA256 750cda65136b7bd664bfc6171395f89329f1176e3c5fa16878ca7ee1a5c1e4da
MD5 6335a5f6ba15ee351bf7b3c20a5447e7
SHA1 5967a20fdd1aa605ac47f780eb6636df2bd80eb9
SHA512 d41008e97298586befd8614f05e113390624fda8e8a9845ac8ca069572eb891949400307cad5db81d064a18d43d0e4ac8f99f47f7cefea9b9f8126e961ba4922
SSDEEP 49152:aG7vIzYcpD/hcQC6wBlh+NkYHY7+9RA7ULWRpuVEgf+0XxgMdR/IuFn/nxT0Ri:awiwoNG7cAB0uadL
TLSH
T18EF59E7766E800ECD477C1BCDA978A17E772B4850720A6DF16E446692F27BE00B7E312
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2010872

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\supquarter\Documents\zynova executor\ZynovaModule\build\ZynovaModule.pdb

ws2_32

inet_pton WSASocketW shutdown getpeername getsockname ntohs getsockopt WSAPoll ioctlsocket getnameinfo WSAGetLastError accept bind closesocket ntohl listen getaddrinfo inet_addr send socket connect recv htons freeaddrinfo setsockopt WSACleanup WSAStartup

crypt32

CertFreeCertificateContext CertGetCertificateChain CryptBinaryToStringA CertOpenSystemStoreW CertVerifyCertificateChainPolicy CertFreeCertificateChain CertCloseStore CertEnumCertificatesInStore CertCreateCertificateContext

winhttp

WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpSetOption WinHttpOpenRequest WinHttpReadData WinHttpConnect WinHttpOpen WinHttpReceiveResponse WinHttpQueryDataAvailable WinHttpWebSocketCompleteUpgrade WinHttpWebSocketClose WinHttpWebSocketReceive WinHttpWebSocketSend WinHttpQueryHeaders

kernel32

RtlLookupFunctionEntry RtlCaptureContext WakeAllConditionVariable RtlVirtualUnwind AcquireSRWLockExclusive ReleaseSRWLockExclusive UnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetSystemTimeAsFileTime MoveFileExA InitOnceBeginInitialize InitOnceComplete GetFileInformationByHandleEx AreFileApisANSI CreateDirectoryW GetModuleFileNameA GetCurrentProcess ExpandEnvironmentStringsW OutputDebugStringA TerminateProcess InitializeCriticalSection SetFilePointer GetCurrentThreadId GetModuleHandleA Sleep GetModuleHandleExA CreateFileA DisableThreadLibraryCalls AddVectoredExceptionHandler ExitProcess GetCurrentProcessId SetUnhandledExceptionFilter VirtualQuery ReadFile FindFirstFileW GetFileSizeEx HeapFree GetFullPathNameW FindNextFileW WriteFile RemoveDirectoryW FindClose CreateFileW GetFileAttributesW SetFileAttributesW MultiByteToWideChar GetTickCount64 GetLastError DeleteFileW CloseHandle HeapAlloc MoveFileExW GetProcessHeap CopyFileW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection GetVolumeInformationA GetComputerNameA FlushFileBuffers GlobalAlloc GlobalFree GlobalLock GlobalUnlock IsBadReadPtr GetModuleHandleExW GetModuleFileNameW CreateProcessW VirtualFree VirtualAlloc FillConsoleOutputCharacterA GetConsoleScreenBufferInfo SetConsoleTextAttribute SetConsoleTitleA GetStdHandle WriteConsoleA SetConsoleMode ReadConsoleA GetConsoleMode FreeConsole FillConsoleOutputAttribute GetConsoleWindow SetConsoleOutputCP SetConsoleCursorPosition AllocConsole FormatMessageA LoadLibraryA QueryPerformanceFrequency GetProcAddress VerSetConditionMask GetModuleHandleW QueryPerformanceCounter GetFileInformationByHandle GetFileAttributesExW SleepConditionVariableSRW GetLocaleInfoEx GetLocalTime LocalFree InitializeSListHead

user32

GetWindowLongW DefWindowProcW AdjustWindowRectEx GetKeyState DestroyWindow MonitorFromWindow EnumDisplayMonitors CreateWindowExW ScreenToClient SetWindowTextW RegisterClassExW WindowFromPoint GetCapture GetMonitorInfoW ClientToScreen IsChild TrackMouseEvent SetLayeredWindowAttributes SetFocus BringWindowToTop LoadCursorW SetCapture SetCursor SetWindowLongW GetClientRect ReleaseCapture SetForegroundWindow IsIconic SetCursorPos GetCursorPos SetWindowPos ShowWindow GetWindowThreadProcessId keybd_event GetSystemMetrics OpenClipboard CloseClipboard EmptyClipboard MessageBoxA GetForegroundWindow GetClipboardData mouse_event SetClipboardData FindWindowA CallWindowProcW GetDC SetWindowLongPtrW ReleaseDC MessageBoxW

gdi32

GetDeviceCaps

comdlg32

GetSaveFileNameA GetOpenFileNameA

advapi32

CryptAcquireContextW GetCurrentHwProfileW CryptDestroyKey CryptEncrypt CryptGenRandom CryptReleaseContext CryptGetHashParam CryptImportKey CryptSetKeyParam CryptDecrypt CryptDestroyHash CryptHashData CryptCreateHash

shell32

SHGetFolderPathW SHBrowseForFolderA ShellExecuteA SHGetPathFromIDListA

ole32

CoTaskMemFree

msvcp140

_Xtime_get_ticks _Thrd_join ?tolower@?$ctype@D@std@@QEBADD@Z ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z _Thrd_id ?_Random_device@std@@YAIXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z _Cnd_signal ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Throw_Cpp_error@std@@YAXH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Thrd_detach _Mtx_unlock ?_Xbad_function_call@std@@YAXXZ _Query_perf_frequency _Query_perf_counter ??_7_Facet_base@std@@6B@ _Strxfrm ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?id@?$ctype@D@std@@2V0locale@2@A ?id@?$collate@D@std@@2V0locale@2@A ??_7facet@locale@std@@6B@ _Strcoll ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Facet_base@std@@UEAA@XZ ?uncaught_exceptions@std@@YAHXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

bcrypt

BCryptCloseAlgorithmProvider BCryptHashData BCryptFinishHash BCryptGenRandom BCryptOpenAlgorithmProvider BCryptGetProperty BCryptCreateHash BCryptDestroyHash

d3dcompiler_47

D3DCompile

imm32

ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow ImmAssociateContextEx ImmGetContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_set_purecall_handler __std_exception_copy __std_exception_destroy __C_specific_handler _purecall strchr wcsrchr strstr memcpy __std_type_info_destroy_list memmove memset memcmp memchr __current_exception __C_specific_handler_noexcept __current_exception_context strrchr _CxxThrowException

api-ms-win-crt-runtime-l1-1-0

signal _beginthreadex _errno abort exit _invoke_watson set_terminate _resetstkoflw _set_invalid_parameter_handler _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit _initterm _initterm_e terminate

api-ms-win-crt-heap-l1-1-0

calloc malloc _callnewh realloc free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s __stdio_common_vsscanf setbuf fopen __acrt_iob_func ftell _fseeki64 fseek fread __stdio_common_vswprintf_s fsetpos ungetc fflush _wfopen_s fputc _wfopen setvbuf fgetpos fwrite fgetc __stdio_common_vsprintf _get_stream_buffer_pointers __stdio_common_vfprintf __stdio_common_vsprintf_s __stdio_common_vfwprintf fclose

api-ms-win-crt-string-l1-1-0

strncpy_s strspn isgraph strcmp isupper isxdigit iscntrl ispunct isdigit islower strnlen _wcsicmp wcscpy_s strcpy_s _wcsnicmp tolower wcscat_s strncmp isalnum strncat _stricmp isalpha strcspn strncpy isblank toupper isspace strpbrk

api-ms-win-crt-math-l1-1-0

exp floorf cosh fmod llround fmodf cosf log ceilf ceil atan2f atan2 log10 atan asin acosf acos _dclass log2 logf pow powf sin _dsign ldexp round modf frexp floor sinf sinh sqrt sqrtf tanh tan cos

api-ms-win-crt-convert-l1-1-0

strtoll strtol atof strtoull strtoul strtod atoi

api-ms-win-crt-filesystem-l1-1-0

remove _unlock_file _lock_file

api-ms-win-crt-locale-l1-1-0

localeconv ___lc_codepage_func

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-time-l1-1-0

_time64 _difftime64 strftime _localtime64_s _gmtime64_s clock

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

ZynovaV1.1.1.zip

Injector.exe

ntdll

kernel32

user32

advapi32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

generic

Zynova.exe

bcryptprimitives

ntdll

kernel32

user32

api-ms-win-core-synch-l1-2-0

shell32

combase

comctl32

gdi32

oleaut32

imm32

ole32

advapi32

dwmapi

shlwapi

api-ms-win-core-winrt-error-l1-1-0

ws2_32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic

ZynovaModule.dll

ws2_32

crypt32

winhttp

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

msvcp140

bcrypt

d3dcompiler_47

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

generic