Behavioral task
behavioral1
Sample
arcane.exe
Resource
win11-20241007-en
General
-
Target
arcane.exe
-
Size
3.2MB
-
MD5
d343bc43f13377cb9bd35f1b9c133bef
-
SHA1
65839f0b0ca89114a071485f55014af4fe6cd717
-
SHA256
bb474179c4dd97ddbba0d6793446c2114ed91a4bb1844130b0554134801e3e0a
-
SHA512
cc4871a99631f67f8ff1f9f9d97cf270e288409f02031d549be97cfb873fe83bf383224158d30fc17498cff8ed7b00d5ccf65fe27a1ef7437d88ad365586c716
-
SSDEEP
98304:sDKV4Hdni94iv8eWUnwtN4aR/pSlkY0s:6HNY5DWUwjDR/0r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource arcane.exe
Files
-
arcane.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 7.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX2 Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE