DotNetRuntimeDebugHeader
Static task
static1
General
-
Target
Arctis Spoofer.exe
-
Size
40.8MB
-
MD5
04d09e8ec6ffe6534ee2ab819252edd7
-
SHA1
0a0bf08d1649fa2b2c596d2c5963c05afbd270b4
-
SHA256
30557d2ed132586a2b57eefa685d7b7682fddf082c8500d586f6253659806416
-
SHA512
ce6a09a81bbc86d7f49a0ad87bb1b4cd904b78e1516eb21e8ae71f50dff91ba7bf1a40429cdc21ca40c3737c0fce298763a6f605730cbbd828dca2073ef5ab21
-
SSDEEP
786432:s4abhfxukhgENKb25IzKVNakSwTVq+WpaWO3pY8coE:sBumIK5IzKVNPbw4p3phc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Arctis Spoofer.exe
Files
-
Arctis Spoofer.exe.exe windows:6 windows x64 arch:x64
09f927dbf84bb0ffa458894140f1fc0b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
advapi32
RegCloseKey
bcrypt
BCryptGenRandom
crypt32
CertNameToStrW
iphlpapi
GetAdaptersAddresses
kernel32
RtlPcToFileHeader
ncrypt
NCryptOpenKey
ole32
CoTaskMemFree
secur32
GetUserNameExW
ws2_32
GetAddrInfoW
api-ms-win-crt-math-l1-1-0
pow
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-string-l1-1-0
strcpy_s
api-ms-win-crt-runtime-l1-1-0
terminate
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Exports
Exports
Sections
.text Size: - Virtual size: 742KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.managed Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 443KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. ia Size: - Virtual size: 27.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.+Ps Size: 1024B - Virtual size: 552B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.X@O Size: 40.8MB - Virtual size: 40.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ