azure[.]exe | Triage™

Resubmissions

27/10/2026, 18:19

261027-wylh4sec288

27/10/2026, 18:19

261027-wx71qafs2s8

Sharing

Copy URL Twitter E-mail

General

Target
azure.exe
Size 5.4MB
Sample261027-wylh4sec28
SHA256 90fa404449d3682ca566c9ab5786eee5eddeabb911209f777d3cadbb22302b7e
MD5 0841ae3825ca7d8601f42025d6dfa737
SHA1 473903676a081960cc560eab97b374145cdb5aef
SHA512 1baf459232b6f26ca38a751713b3475d62b394ab2df2547fda2dcbd5ce9722c0cc23da8e5f77c88c5ec03985063eea4df6101900afdbc7c6dc4f985641006bf6
SSDEEP 98304:FxADk/Wr5AAkX45AsyDGGswulEEbtvn7rIoJNVF9Op6vJdsvep6g:FxcMWVaiA7D3swd8X39VzIe8
TLSH
T1E946F1DDC2AD42ACE229C23894869647B3F3BD4E6764DFFB27D08C901DAB180F974549
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
azure.exe

File Explorer

azure.exe

.exe 5.4MB

azure.exe

IMPHASH 670afbb03c9f559474f7c40cbe10ade4
SHA256 90fa404449d3682ca566c9ab5786eee5eddeabb911209f777d3cadbb22302b7e
MD5 0841ae3825ca7d8601f42025d6dfa737
SHA1 473903676a081960cc560eab97b374145cdb5aef
SHA512 1baf459232b6f26ca38a751713b3475d62b394ab2df2547fda2dcbd5ce9722c0cc23da8e5f77c88c5ec03985063eea4df6101900afdbc7c6dc4f985641006bf6
SSDEEP 98304:FxADk/Wr5AAkX45AsyDGGswulEEbtvn7rIoJNVF9Op6vJdsvep6g:FxcMWVaiA7D3swd8X39VzIe8
TLSH
T1E946F1DDC2AD42ACE229C23894869647B3F3BD4E6764DFFB27D08C901DAB180F974549
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5518336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d9

Direct3DCreate9

dwmapi

DwmSetWindowAttribute

shell32

SHGetFolderPathA ShellExecuteA

ole32

CoInitializeEx CoInitialize CoTaskMemFree CoUninitialize CoCreateInstance

winmm

PlaySoundW mciSendStringW

advapi32

LookupPrivilegeValueW CheckTokenMembership FreeSid OpenProcessToken RegSetValueExW RegQueryValueExA RegFlushKey RegSetValueExA RegOpenKeyExA RegEnumKeyExA InitiateSystemShutdownExW AdjustTokenPrivileges RegCloseKey RegGetValueA AllocateAndInitializeSid RegCreateKeyExW

user32

LoadCursorA GetDC MonitorFromWindow EnumDisplayMonitors SetWindowTextW WindowFromPoint GetCapture SetWindowLongA ClientToScreen IsChild GetMonitorInfoA GetForegroundWindow GetKeyState BringWindowToTop SetCapture SetCursor SetWindowLongW ReleaseCapture IsIconic SetCursorPos ReleaseDC GetCursorPos AdjustWindowRectEx OpenClipboard CloseClipboard EmptyClipboard GetClipboardData GetWindowLongW SetLayeredWindowAttributes SetForegroundWindow RegisterClassExA SetProcessDPIAware GetDesktopWindow PostQuitMessage UnregisterClassA PeekMessageA GetClientRect LoadIconA TranslateMessage SetFocus CreateWindowExA DefWindowProcA ShowWindow ScreenToClient SetWindowPos DestroyWindow SetClipboardData GetWindowRect DispatchMessageA

gdi32

GetDeviceCaps

kernel32

AreFileApisANSI GetLastError GetStartupInfoW GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead GetFileInformationByHandleEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable GetFileAttributesExW SleepConditionVariableSRW FindClose CreateFileW CreateDirectoryW GetLocaleInfoEx FormatMessageA LocalFree UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent QueryPerformanceCounter GetModuleHandleW VerifyVersionInfoW FreeLibrary VerSetConditionMask QueryPerformanceFrequency LoadLibraryA GlobalUnlock GlobalLock GlobalFree GlobalAlloc FlushFileBuffers WideCharToMultiByte CreateFileA SetComputerNameExW SetFilePointer CreatePipe DeviceIoControl WriteFile SetHandleInformation ReadFile GetExitCodeProcess CreateProcessA MultiByteToWideChar WaitForSingleObject GetTickCount RtlCaptureContext RtlLookupFunctionEntry FindFirstFileW RtlVirtualUnwind GetCurrentProcess GetModuleFileNameW GetEnvironmentVariableA GetFileAttributesW GetModuleHandleA GetFileAttributesA CloseHandle GetProcAddress GetCurrentProcessId CreateDirectoryA

msvcp140

??Bios_base@std@@QEBA_NXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Thrd_id _Thrd_join _Mtx_unlock ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Random_device@std@@YAIXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?uncaught_exceptions@std@@YAHXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ?_Id_cnt@id@locale@std@@0HA ?_Xout_of_range@std@@YAXPEBD@Z ?_Winerror_map@std@@YAHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ??7ios_base@std@@QEBA_NXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ?good@ios_base@std@@QEBA_NXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

imm32

ImmSetCompositionWindow ImmGetContext ImmReleaseContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __current_exception_context __std_exception_destroy __current_exception __C_specific_handler memset memcpy memmove memcmp memchr strstr __std_terminate __std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s __p__commode _set_fmode fflush __stdio_common_vsscanf _wfopen fseek __acrt_iob_func ftell __stdio_common_vsprintf_s _get_stream_buffer_pointers _fseeki64 fread fsetpos ungetc setvbuf fgetpos __stdio_common_vsprintf fwrite fgetc fclose fputc

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-utility-l1-1-0

qsort rand srand

api-ms-win-crt-string-l1-1-0

strncpy toupper tolower isxdigit strcmp strncmp

api-ms-win-crt-runtime-l1-1-0

_set_app_type _exit _seh_filter_exe _c_exit _register_thread_local_exe_atexit_callback _cexit _beginthreadex _initterm _register_onexit_function terminate _initialize_onexit_table _invoke_watson _initialize_narrow_environment _configure_narrow_argv _initterm_e abort _crt_atexit system _get_narrow_winmain_command_line exit

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-multibyte-l1-1-0

_mbscmp

api-ms-win-crt-locale-l1-1-0

_configthreadlocale ___lc_codepage_func

api-ms-win-crt-math-l1-1-0

acosf sqrtf sinf cosf ceilf fmodf _hypotf __setusermatherr

Name

.text

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

375KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2.9MB

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

133KB

Virtual Size

325KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

azure.exe

d3d9

dwmapi

shell32

ole32

winmm

advapi32

user32

gdi32

kernel32

msvcp140

imm32

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

generic