Aura[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Aura.exe
Size

337KB
MD5

fb17860d823ecff553b14fc3ce635e53
SHA1

71fad7ab6b167c86e1cd2668066096f94b3a69eb
SHA256

129cb5d8eaa200f94e05c4469f4518013cc471e82aacb53b1ee5955fa54e3267
SHA512

1aacf5c026a27bb81e6e6b785ca94d821cdff4ab84deff6e805cc2545b181df4997becd006d7cadaf8b8e2a8efd54a2130a4ccd2d1935f445b4aa81c3b54909d
SSDEEP

3072:vLBTn6PJ/24Z/EbkernYvGtg7BZOUXmFOwlp2ovGtg7BZtUXR7Ow+pb:vN6PJ/24ZGNYvT7/tmFzTvT7/sR7Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Aura.exe

Files

Aura.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Amro\Downloads\Aura-.NET-Obfuscator-main\Aura-.NET-Obfuscator-main\Aura\Aura\obj\Release\Aura.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ