ArcaniaLauncher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ArcaniaLauncher.exe
Size

2.5MB
MD5

c32bd35a554a0d387c8e17a40467cfa1
SHA1

8c17d0596a04ffe1c790ce60eddaaf542428afa5
SHA256

095720f7c67eedaa0611eebb76a840936910245a77f9ee245faf279b1402810f
SHA512

c93f9963a1b74bc9169eeedbaea0f9a1142c00480907ebc7f8be64e4818641fe95c599833c8273ad524d13962892accf8e693e678e0246c4706d8843c5876235
SSDEEP

24576:Y1bHRLZINZtMJWHXQsgpQiVkI0W50QWX16WBjVaMNaxnxYRUUUUU/Uh8zwJdO5ja:qbHvC/AsgpQiVjp3uMWhILxe8zlpvmB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ArcaniaLauncher.exe

Files

ArcaniaLauncher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Av0ke\Desktop\LauncherPrestarter-master12\Prestarter\obj\Release\ArcaniaLauncher.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ