Aura_protected[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Aura_protected.exe
Size

3.5MB
MD5

2585cb2db5b79e8f24c90117e662d256
SHA1

9d572e2ac5cac313865674a458c3f9edfe009b00
SHA256

0872088198d7c54649834ee7d4b1002761f369860af908f2e925214520fcae21
SHA512

256e4101f66a2bc89585572e0f2573f73b4f74fe1b617db50a742f8bd7fa33f64449cdcb0f349a207b1e69a760f7ec458b6929613d4446144482f09834bd986b
SSDEEP

24576:R0Mmay3OiOSuMPcgs/KEp9kihphWPPoGyO22JYNLqKns:ReayrOuPvOhWXyNm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aura_protected.exe

Files

Aura_protected.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 141KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ