AuroraBeautiful
Behavioral task
behavioral1
Sample
fe96908b848e60f8d145e137e8149856e021d287b04ec99adda431376a56695b.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fe96908b848e60f8d145e137e8149856e021d287b04ec99adda431376a56695b.dll
Resource
win10v2004-20230220-en
General
-
Target
fe96908b848e60f8d145e137e8149856e021d287b04ec99adda431376a56695b
-
Size
2.2MB
-
MD5
ddcebc288ba611e1d0388133482c2155
-
SHA1
0b66937e18a2b468ab245fcf2d4e59e63d5e35d8
-
SHA256
fe96908b848e60f8d145e137e8149856e021d287b04ec99adda431376a56695b
-
SHA512
06d49346fd44045e26c813e4e75cb3cab9efef614c5fe0c6e3f47b98d2e3ab9dfce9f17dbc2918b1f95565ad307d590018da3972508dcd4fd824d5637c3de90b
-
SSDEEP
49152:cYXuNUgoYuSTeZt7+9GE8SpaUpIh85togj/QgQjL5:hYMoa0bIyb7rQB9
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe96908b848e60f8d145e137e8149856e021d287b04ec99adda431376a56695b
Files
-
fe96908b848e60f8d145e137e8149856e021d287b04ec99adda431376a56695b.dll windows x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.UPX1 Size: - Virtual size: 6.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.UPX1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE