490063206c1049e12cd3e29e7ae9a166950b48c074706aa4e45b467cc1738314

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
06-01-2025 15:46

Target

Build/ArcadiaLauncher.exe
Size

9.6MB
MD5

935811dc5d515b089afe293d4471d215
SHA1

9e7d4ec78767b94752ec657fdd7dc5a83e6d1cd8
SHA256

d5be09b425b16925940fa291de9f802051e7cd366dbd6dba66742e334ef8dd90
SHA512

1aa7704c31971cd84dcffc31bedeff99b97fb589a2499a0a633d3dc6f80024d9fa19c347fa12530d92c597b1ab4eb2f89b98a5a127ace1af2b49edec9d7b6647
SSDEEP

196608:nd1dXlQZ5tLBxApPwfI9jUCnORird1KfbLOYgN2oc+nBIdAx3:dbiZ5tMpEIHOQ76bynnBIK

Score

7^/10

upx

Loads dropped DLL 1 IoCs

pid	Process
3020	ArcadiaLauncher.exe

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/files/0x00050000000193df-22.dat	upx
behavioral1/memory/3020-24-0x000007FEF57B0000-0x000007FEF5E71000-memory.dmp	upx

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 1688 wrote to memory of 3020	1688	ArcadiaLauncher.exe	28
PID 1688 wrote to memory of 3020	1688	ArcadiaLauncher.exe	28
PID 1688 wrote to memory of 3020	1688	ArcadiaLauncher.exe	28

C:\Users\Admin\AppData\Local\Temp\Build\ArcadiaLauncher.exe
"C:\Users\Admin\AppData\Local\Temp\Build\ArcadiaLauncher.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:1688
- C:\Users\Admin\AppData\Local\Temp\Build\ArcadiaLauncher.exe
  "C:\Users\Admin\AppData\Local\Temp\Build\ArcadiaLauncher.exe"
  2⤵
  - Loads dropped DLL
  PID:3020

C:\Users\Admin\AppData\Local\Temp\_MEI16882\python312.dll

Filesize
1.7MB

MD5
3c5c6c489c358149c970b3b2e562be5f

SHA1
2f1077db20405b0a176597ed34a10b4730af3ca9

SHA256
73a22a12ea3d7f763ed2cea94bb877441f4134b40f043c400648d85565757741

SHA512
d3fb4e5df409bf2de4f5dc5d02d806aee649a21c339c648248b835c3d5d66ab88312c076c149eaadaa3ce0fb43e6fa293bfa369d8876d6eb18742bd9d12448e3

Download Submit
memory/3020-24-0x000007FEF57B0000-0x000007FEF5E71000-memory.dmp

Filesize
6.8MB

Download