Azyra[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Azyra.exe
Size 34KB
Sample260516-tb1cmsfv3x
SHA256 51d81167af3dcbd91b9027bfdd124c4cc496d959065fea01806729c8beff5caf
MD5 b4ecc535a72720a3d2ea6eb706754f4c
SHA1 c20b8a262919809b79d9f113be42f772727995e8
SHA512 48d98b1d5fe10e83c36220310018ce96cbff2cbc98810945a4dead0d1d510fa8570ada4631a1ff14d03ea1e335740caa5892aff4adb12576e6f036357f75d128
SSDEEP 768:vnGNbYiBucNbf0XMCIj/fL8wixhpRkZHUf:vnGxFfijI7Qxf
TLSH
T19CF228A74A2400FCD463D2F9D9A75D43D376B80A1371AADF57E080662FBB2C99837D12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Azyra.exe

File Explorer

Azyra.exe

.exe 34KB

Azyra.exe

IMPHASH e6b179743b57928b03fe734e6902ff94
SHA256 51d81167af3dcbd91b9027bfdd124c4cc496d959065fea01806729c8beff5caf
MD5 b4ecc535a72720a3d2ea6eb706754f4c
SHA1 c20b8a262919809b79d9f113be42f772727995e8
SHA512 48d98b1d5fe10e83c36220310018ce96cbff2cbc98810945a4dead0d1d510fa8570ada4631a1ff14d03ea1e335740caa5892aff4adb12576e6f036357f75d128
SSDEEP 768:vnGNbYiBucNbf0XMCIj/fL8wixhpRkZHUf:vnGxFfijI7Qxf
TLSH
T19CF228A74A2400FCD463D2F9D9A75D43D376B80A1371AADF57E080662FBB2C99837D12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

22312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Gabo\Documents\GitHub\azyra.gg\x64\Release\Autoupdate.pdb

winhttp

WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest WinHttpConnect WinHttpQueryDataAvailable

shell32

SHGetFolderPathW

kernel32

SetUnhandledExceptionFilter GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead CreateRemoteThread VirtualAllocEx LoadLibraryA OpenProcess CreateDirectoryW Process32First GetConsoleScreenBufferInfo SetConsoleTitleA GetStdHandle WriteFile SetConsoleMode GetConsoleCursorInfo CreateFileW CreateToolhelp32Snapshot Sleep GetConsoleMode SetConsoleCursorInfo DeleteFileW Process32Next CloseHandle GetConsoleWindow SetConsoleCursorPosition WriteProcessMemory

user32

MoveWindow GetWindowRect

msvcp140

?good@ios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xlength_error@std@@YAXPEBD@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp memmove memcpy __std_exception_copy __std_terminate __C_specific_handler _CxxThrowException __current_exception __current_exception_context memset __std_exception_destroy

api-ms-win-crt-heap-l1-1-0

free _set_new_mode _callnewh malloc

api-ms-win-crt-runtime-l1-1-0

_exit _get_initial_narrow_environment exit _initterm_e __p___argv _c_exit _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe terminate _cexit _initterm _crt_atexit __p___argc _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv system

api-ms-win-crt-string-l1-1-0

wcslen strlen _stricmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale