AuroraBeautiful
Behavioral task
behavioral1
Sample
5900cf2b1231dde4485330206719ccd8439b01c09043c1882e2f0936bfcb0b6b.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
5900cf2b1231dde4485330206719ccd8439b01c09043c1882e2f0936bfcb0b6b.dll
Resource
win10v2004-20230220-en
General
-
Target
5900cf2b1231dde4485330206719ccd8439b01c09043c1882e2f0936bfcb0b6b
-
Size
2.2MB
-
MD5
07bb17023f641f0eba5579f6cdb1f626
-
SHA1
d06c230a5f624e9e804800d19a16201cd998b7d2
-
SHA256
5900cf2b1231dde4485330206719ccd8439b01c09043c1882e2f0936bfcb0b6b
-
SHA512
c7aaffda434ca8b72324b20138493a6e477a15576a13fd6fcb399870f36713d2b9c87549d4e962385bd840bd94ed693a4aff10d1bafc774835a3bdf5ee601851
-
SSDEEP
49152:F1wSjpuawjQ7grvSgShfpsCRmzHj5cGjarXW:XfskS0hfe53aC
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5900cf2b1231dde4485330206719ccd8439b01c09043c1882e2f0936bfcb0b6b
Files
-
5900cf2b1231dde4485330206719ccd8439b01c09043c1882e2f0936bfcb0b6b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 6.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE