Static task
static1
Behavioral task
behavioral1
Sample
Aurora Phone Verifier - v2.0.1.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
Aurora Phone Verifier - v2.0.1.exe
Resource
win10v2004-20240802-en
General
-
Target
Aurora Phone Verifier - v2.0.1.zip
-
Size
7.0MB
-
MD5
e9b153f6873baaa5433bde6bda944720
-
SHA1
6d1fc7fd663b68d84b266ce410491d4e59c151c3
-
SHA256
e0b30b3653703e7f72034df9654d34275d2a79bd4a65a797d8a63cd1bc6422d0
-
SHA512
a24e47dbf706dc74ee7e8a64d67c94ae7263a5dc006e2bd95e42bd11957ee1af1a088dcf240abdd3d765524d10138d31191d14026c4b5368aed21bdc6c171962
-
SSDEEP
196608:q2jguxHkYBU+gcs4u213VezvVJneapIz7k4C99ka/:qhe/W5csP29oWLz75C99H/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Aurora Phone Verifier - v2.0.1.exe
Files
-
Aurora Phone Verifier - v2.0.1.zip.zip
-
Aurora Phone Verifier - v2.0.1.exe.exe windows:0 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Tainted Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Tainted Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Config.json