Aurora-1.5.0-Portable-x64.zip
- SHA256 7d8cbdd39a046194337cb8b543c67725338410a601d77644057e0586f87a072d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Aurora.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
Aurora.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target Aurora-1.5.0-Portable-x64.zip
- Size 19.2MB
- Sample261102-tamp6abs6w
- SHA256 7d8cbdd39a046194337cb8b543c67725338410a601d77644057e0586f87a072d
- MD5 6e54bddf6ab2a26d4641b6eb38fe13a6
- SHA1 0652b98344bf624967e19892ecec74ebffa465c9
- SHA512 c5c8398e7d64549247fa6c681877b247d6f0257502d45f13425339cbc85674e1c7791f4a26a6fffa4c9e1bb790199a210ca3dda9792b3b6838c4418317b5415c
- SSDEEP 393216:BiUXK1LUVHNjR4lJv6r/u9nLYagNwS2uHvDv/v6hLW5S8ba4IE7GUkZ:/PHNjR+V6a0agGuHv7/35fO4PPg
- TLSH T1361733143D18414DFE45EEC7F111345CEA2B6D69C0A04BAA84AA3B5B97DE2FC5E13E0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Aurora.exe
File Explorer
-
Aurora-1.5.0-Portable-x64.zip.zip 19.2MB
-
Aurora.exe.exe 49.0MB
-
README.md6KB
Aurora.exe
- IMPHASH b196866f0bf37f1f128fa153413b744f
- SHA256 a3db4f933c777d6b4d83b113b1d66446e867f0baa2a8d92e4ede716633431066
- MD5 8741945f790475d0806ae7ef591b8259
- SHA1 be3a0d57ba2b81b47854e26675df27717a527792
- SHA512 ef1a4fbcd24f75ef9eed4023d55756f31c7d6fe4b83c702c4ed6da540cd44330b07d00eacea455763cf37157c0cb175253590642e6646eb18211f19e9999d638
- SSDEEP 786432:sI5WLCLeD6dLL6K+CSllNI0dye9r5d7Q:Z5WcLL6K+CSllNI0dye9dx
- TLSH T109B75C4BFC6648E8E4E9D934C5669213BB713C648B2023D72B50F6582F3EFD05ABA750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
558976
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
20.6MB
Virtual Size
20.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22.5MB
Virtual Size
22.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4.9MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
541KB
Virtual Size
540KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
435KB
Virtual Size
435KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
README.md
- SHA256 8b2b01b9c9654ac3d0b41792f10e97b03c16faecfa1e19b7b436022cf4f54066
- MD5 8817ba96659484cf7a0da0abcf7a8586
- SHA1 e3ea6eb3d6efc167e3aa30f7dba965c1e7ec9ed1
- SHA512 58825e12128b1dc06723a6dea485d96320978030cb3a960abdb0e98fd55507cb245408e85d6a0b26006a38bc970929048e69778316c9b0f2efc27f9053978ff8
- SSDEEP 192:dqpwVeDMgfrMapBLqZLNV5438SsQZpX26nDD/oWR:dqp7Lrf/F3K49DoWR
- TLSH T16AE1C723BB08A39D0B738592F5D793C06F7860493309482494DD52ACA3917AAC77F2E6
- MD5 SHA1 SHA512 SSDEEP TLSH