ark[.]exe[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ark.exe.bin
Size

490KB
MD5

447e93aa44abb9cdebf8260f993aa010
SHA1

ef5594330d9ab917bc2791d5d565f1e40cf2d032
SHA256

619d0f22fde3e64e9a65e98b056cf63c1fe446025a9f342f780adfc8e1f456ce
SHA512

c1928dfe2ded9791789a4fd2a1f7af025790559641fd7a9640d852bdc8a586566559949e5ab7a588579999fa737848c67404296c3871ce23d97e231479e9cce2
SSDEEP

6144:HAO0hNKsyiXQn1CTfZf1MfEIAy8NUG9NUez6Z5kcNoP6Y1SN:Hv08tn1LcIAJNrzsktP6oG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ark.exe.bin

Files

ark.exe.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 485KB - Virtual size: 485KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ