D:\Files\Arcane 2.0\ArcaneWPF\obj\Release\ArcaneWPF.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ArcaneWPF.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
ArcaneWPF.exe
Resource
win10v2004-20240709-en
General
-
Target
ArcaneWPF.exe
-
Size
709KB
-
MD5
292e9336bd4aeff4a7dd5221f8512de7
-
SHA1
8fa6e77ab27c3ddaaff96b4f09b730bb515def33
-
SHA256
ec04dd8f317c44d962a6613dd6cae7575a8f760731ce826deb9517203ab04380
-
SHA512
a0cd63d9a8eb6240eee14d91e93375c690db2d7b5b94d15ffb21d989165ee517ac3862fd3bfde1f547b19c855aa22b9055434a158ba9c6520746d0672121d575
-
SSDEEP
12288:xQJ6irR0mAgZW/Sd7QEQuJOpCc6kH1MkFL1lYNJSs:xQJj90mAgIahQMJOJH17LrYvSs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ArcaneWPF.exe
Files
-
ArcaneWPF.exe.exe windows:4 windows x86 arch:x86
Password: hh
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 539KB - Virtual size: 539KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ