Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Behavioral task
behavioral1
Sample
Aurora_V2/Aurora.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Aurora_V2/Aurora.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Aurora_V2/scripts/scripts.dll
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
Aurora_V2/scripts/scripts.dll
Resource
win10v2004-20240226-en
Target
Aurora X [by RyosX].rar
Size
7.8MB
MD5
89fccf749850ede660ae3fbeac95e487
SHA1
1795c36e70b4454784419e475516c1e1a35fe221
SHA256
ba00978fa3933d128d43f7be77ecd4323284b4bdf1ac80ac0315ef09802749ae
SHA512
eb2b97d321f0bda62f6a698f99debf435a8b040c26a1f68f6769bfa88337887c8dc9c951e9e7ff9dfc78b0f5c730155f4302e89f0bb4c870b3c29b4a2b807807
SSDEEP
196608:Hi2cuMXbwtCZklt0wWwp2aB4gByTnN2yXwc9el:HqoZlt0Wppopb9el
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
VirtualProtect
VirtualAlloc
LoadLibraryA
GetProcAddress
lstrlenW
CreateThread
Sleep
WaitForSingleObject
FreeConsole
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
WriteConsoleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
CompareStringW
LCMapStringW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
DecodePointer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Flash.pdb
VerQueryValueW
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
mixerGetID
waveInGetDevCapsA
waveOutGetDevCapsA
waveOutMessage
waveOutGetDevCapsW
waveInGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInStart
waveInAddBuffer
waveInStop
waveInMessage
waveInUnprepareHeader
waveInReset
waveInPrepareHeader
waveInOpen
timeKillEvent
timeGetTime
timeSetEvent
timeEndPeriod
timeBeginPeriod
timeGetDevCaps
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutClose
waveOutOpen
waveOutGetPosition
mixerClose
mixerGetLineControlsA
mixerGetLineInfoA
mixerGetDevCapsA
mixerOpen
mixerGetControlDetailsA
waveOutRestart
waveOutPause
mixerSetControlDetails
waveInClose
waveInGetPosition
InternetSetCookieW
InternetGetCookieW
CertFindCertificateInStore
CertVerifySubjectCertificateContext
CertCreateCertificateContext
CryptGetMessageCertificates
CryptVerifyMessageSignature
CertAddStoreToCollection
CertOpenStore
CertVerifyRevocation
CertFreeCertificateContext
CertCompareCertificate
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertCompareCertificateName
CryptFindOIDInfo
CertRDNValueToStrW
CertFindRDNAttr
CryptDecodeObjectEx
CertNameToStrW
CertCloseStore
CertVerifyTimeValidity
SysAllocString
VariantClear
VariantInit
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
VarBstrCat
SysAllocStringByteLen
SafeArrayUnlock
SafeArrayLock
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy
SafeArrayAccessData
VariantChangeType
OleCreatePropertyFrame
UnRegisterTypeLi
ord1
ord8
AlphaBlend
GetTickCount
LCMapStringW
CreateProcessA
GetSystemDirectoryW
GetSystemWow64DirectoryW
FindClose
FindNextFileW
RemoveDirectoryW
FindFirstFileW
SystemTimeToFileTime
GetSystemTime
GetFileSizeEx
CreateFileW
CreateDirectoryW
GetProcessTimes
GetCurrentProcessId
GlobalSize
GetSystemDirectoryA
GetTempFileNameW
GetSystemInfo
GetUserDefaultUILanguage
MoveFileExW
VirtualQuery
GetUserDefaultLangID
DeleteFileA
CreateFileA
WriteFile
SetFilePointer
VerifyVersionInfoW
VerSetConditionMask
ReadFile
GetFileSize
CreateThread
LockResource
FindResourceExA
FindResourceExW
SetUnhandledExceptionFilter
GetTempPathW
GetTimeZoneInformation
ReleaseSemaphore
CreateSemaphoreW
DeviceIoControl
GetFileAttributesExW
ExpandEnvironmentStringsA
GetLongPathNameW
GetTempFileNameA
GetTempPathA
CreateDirectoryA
FindResourceW
SetFilePointerEx
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameW
OutputDebugStringA
GetFileInformationByHandle
GetVolumeInformationW
TryEnterCriticalSection
UnmapViewOfFile
ReleaseMutex
MapViewOfFile
CreateFileMappingA
GetExitCodeThread
DuplicateHandle
TerminateThread
CreateWaitableTimerW
SetThreadPriority
CompareFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
OpenThread
SleepEx
SwitchToThread
SetEndOfFile
FlushFileBuffers
GlobalMemoryStatusEx
IsDebuggerPresent
SetSystemTime
FileTimeToSystemTime
TlsAlloc
TlsFree
ResumeThread
CreateTimerQueueTimer
DeleteTimerQueueTimer
CreateSemaphoreA
HeapAlloc
HeapFree
HeapUnlock
HeapWalk
HeapLock
HeapCreate
HeapDestroy
VirtualProtect
GetNumberFormatW
GetCurrencyFormatW
CompareStringW
GetDateFormatW
GetTimeFormatW
GetUserDefaultLCID
IsValidLocale
EnumSystemLocalesW
GetProcessHeap
GetProcessAffinityMask
IsProcessorFeaturePresent
ExitProcess
UnhandledExceptionFilter
RtlUnwind
GetCommandLineA
ExitThread
HeapReAlloc
GetLocaleInfoW
GetSystemTimeAsFileTime
GetStdHandle
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
SetHandleCount
GetFileType
GetStartupInfoA
LCMapStringA
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
SetEnvironmentVariableA
GetNativeSystemInfo
lstrcpynW
GlobalMemoryStatus
FlushConsoleInputBuffer
LoadResource
SizeofResource
DisableThreadLibraryCalls
SetLastError
OutputDebugStringW
GetCurrentThreadId
GetModuleFileNameW
GetVersionExA
GetModuleFileNameA
GetFileAttributesA
SetFileAttributesA
LocalAlloc
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
lstrcmpiW
CreateMutexW
LoadLibraryW
LoadLibraryA
GetProcAddress
WaitForMultipleObjects
FreeLibrary
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventW
SetEvent
GetModuleHandleW
GlobalAlloc
GetLastError
GetVersionExW
GetLocaleInfoA
lstrlenW
lstrlenA
WideCharToMultiByte
GlobalFree
InterlockedDecrement
InterlockedIncrement
DeleteFileW
GetFileAttributesW
GetCurrentThread
SetThreadAffinityMask
TlsSetValue
IsDBCSLeadByte
GetACP
GetCPInfo
MultiByteToWideChar
RaiseException
HeapSize
DebugBreak
ExpandEnvironmentStringsW
InterlockedExchange
InterlockedCompareExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TlsGetValue
SetConsoleMode
ReadConsoleInputA
GetModuleHandleA
CreateEventA
CreateWaitableTimerA
SetWaitableTimer
CancelWaitableTimer
InterlockedExchangeAdd
GetVersion
VirtualAlloc
VirtualFree
CopyFileW
TerminateProcess
LoadLibraryExW
CreateMutexA
RegisterClipboardFormatW
GetWindowThreadProcessId
RemoveMenu
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
CreatePopupMenu
TrackPopupMenu
DestroyMenu
DrawMenuBar
CreateMenu
SetMenuInfo
CharUpperW
CharLowerW
PostThreadMessageW
GetMessageW
CloseWindow
WaitForInputIdle
TranslateMessage
DispatchMessageW
SetWindowTextA
RedrawWindow
DialogBoxIndirectParamW
SetWindowTextW
SendMessageTimeoutW
CreateIconIndirect
GetMonitorInfoW
SetRectEmpty
GetCursor
DestroyIcon
LoadImageW
GetPropW
SetPropW
GetSystemMetrics
InflateRect
GetClipboardFormatNameA
RegisterClipboardFormatA
IsWindow
PtInRect
EqualRect
SetWindowRgn
BeginPaint
EndPaint
GetSubMenu
MapVirtualKeyW
LoadStringW
IntersectRect
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
SetClipboardData
EmptyClipboard
EnumDisplayDevicesW
DestroyCaret
ShowCaret
CreateCaret
SetCaretPos
MoveWindow
GetActiveWindow
UnregisterClassA
LoadIconA
DeleteMenu
RegisterClassExA
CreateWindowExA
ReleaseCapture
UpdateWindow
SystemParametersInfoW
GetMessageTime
LoadIconW
RegisterClassW
IsWindowVisible
DialogBoxParamW
GetDlgItem
EndDialog
SetWindowPos
GetKeyState
LoadStringA
MessageBoxA
SendMessageW
GetQueueStatus
SetTimer
GetCapture
SetCursor
GetCursorPos
WindowFromPoint
ScreenToClient
GetClientRect
SetCapture
MessageBoxW
KillTimer
PeekMessageW
EnableMenuItem
CheckMenuItem
GetWindowInfo
CopyRect
PostQuitMessage
ClientToScreen
SendInput
ActivateKeyboardLayout
GetKeyboardLayout
GetWindowRect
UpdateLayeredWindow
UnregisterClassW
GetParent
GetFocus
IsChild
SetFocus
RegisterClassExW
InvalidateRect
DefWindowProcW
UnionRect
CallWindowProcW
GetDC
ReleaseDC
LoadCursorW
GetClassInfoExW
GetWindowLongW
SetWindowLongW
CharNextW
SetRect
GetForegroundWindow
GetDesktopWindow
EnumDisplayDevicesA
MonitorFromWindow
FillRect
OffsetRect
FlashWindowEx
GetSystemMenu
IsZoomed
GetWindowPlacement
SetWindowPlacement
ShowWindowAsync
IsIconic
EnumDisplaySettingsW
MapWindowPoints
GetWindowTextLengthW
CreateWindowExW
ShowWindow
DestroyWindow
GetDoubleClickTime
EnumWindows
PostMessageW
IsWindowEnabled
GetWindow
GetClassNameA
GetWindowTextW
GetWindowTextA
DefWindowProcA
GetWindowLongA
LoadCursorA
SetWindowLongA
PostMessageA
RegisterWindowMessageA
EnumDisplayMonitors
MonitorFromRect
GetMonitorInfoA
wsprintfW
GetUserObjectInformationW
GetProcessWindowStation
SetCursorPos
GetDeviceCaps
CreateDIBSection
SelectObject
GetStockObject
GetObjectW
DeleteObject
GdiFlush
DeleteDC
CreateMetaFileW
GetClipBox
SetViewportOrgEx
LPtoDP
CreateRectRgnIndirect
GetObjectType
GetICMProfileA
CreateDCA
SetPixel
TextOutW
SetTextAlign
DeleteMetaFile
CreateBitmap
CreateFontIndirectW
GetTextExtentPoint32A
ExtTextOutA
GetTextExtentPoint32W
GetTextMetricsW
SetTextColor
CreateFontIndirectA
IntersectClipRect
GetClipRgn
CreateRectRgn
SetBkMode
SelectClipRgn
SetTextCharacterExtra
GetTextAlign
GetBkMode
GetTextColor
GetCurrentObject
GetBkColor
EnumFontFamiliesA
CreatePen
DPtoLP
GetTextCharacterExtra
SetWorldTransform
SetGraphicsMode
GetWorldTransform
StartDocW
EndDoc
StrokePath
ExtCreatePen
FillPath
StartPage
EndPage
BeginPath
EndPath
SetPolyFillMode
PolyBezierTo
SelectClipPath
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
SaveDC
GdiAlphaBlend
StretchBlt
BitBlt
SetStretchBltMode
CreateCompatibleBitmap
ExtTextOutW
SetBkColor
GetStretchBltMode
EnumFontFamiliesW
CreateSolidBrush
GetFontData
EnumFontFamiliesExW
LineTo
MoveToEx
Rectangle
StretchDIBits
CreateCompatibleDC
RectVisible
GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
PrintDlgW
CryptDecrypt
CryptSetKeyParam
CryptGetHashParam
CryptHashData
CryptDestroyHash
CryptAcquireContextA
CryptCreateHash
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenProcessToken
GetTokenInformation
IsValidSid
GetSidSubAuthorityCount
GetSidSubAuthority
CryptImportKey
CryptGenKey
CryptDestroyKey
CryptExportKey
CryptEncrypt
RegOpenKeyA
RegQueryValueExW
RegCreateKeyA
RegEnumKeyExW
RegCreateKeyExA
RegSetValueExA
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
SHGetFolderLocation
SHGetFolderPathW
ShellExecuteW
SHGetSpecialFolderPathW
SHFileOperationW
SHGetFolderPathA
SHGetPathFromIDListW
SHBrowseForFolderW
SHAppBarMessage
SHGetSettings
SHGetDiskFreeSpaceExW
ord165
CoTaskMemRealloc
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CreateDataAdviseHolder
StringFromGUID2
WriteClassStm
OleSaveToStream
ReadClassStm
MkParseDisplayName
PropVariantClear
OleFlushClipboard
OleIsCurrentClipboard
OleSetClipboard
OleGetClipboard
OleUninitialize
OleInitialize
CoInitializeEx
CoRegisterMessageFilter
CoSetProxyBlanket
CoTaskMemFree
CoFreeUnusedLibraries
CoInitialize
CreateBindCtx
CoTaskMemAlloc
ReleaseStgMedium
CoCreateInstance
CoUninitialize
socket
WSAIoctl
WSAGetLastError
WSAAsyncSelect
closesocket
WSACleanup
WSASocketA
ntohl
gethostname
WSASocketW
select
__WSAFDIsSet
connect
ioctlsocket
WSAEnumNetworkEvents
WSAEventSelect
WSACreateEvent
WSAAddressToStringA
bind
sendto
recvfrom
WSASetLastError
getservbyport
gethostbyaddr
getservbyname
htonl
inet_ntoa
gethostbyname
inet_addr
WSACloseEvent
htons
getsockname
ntohs
send
WSAStartup
setsockopt
recv
UrlCanonicalizeW
ord158
PathFindFileNameW
StrRStrIW
StrStrIW
AssocQueryStringW
HlinkSimpleNavigateToMoniker
RegisterBindStatusCallback
CreateURLMoniker
CopyStgMedium
DeleteColorTransform
CloseColorProfile
CreateColorTransformW
OpenColorProfileW
TranslateBitmapBits
GetAdaptersAddresses
GetProcessMemoryInfo
AdobeCPGetAPI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IAEModule_AEModule_PutKernel
IAEModule_IAEKernel_LoadModule
IAEModule_IAEKernel_UnloadModule
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ