arkei | 893f6d240413c3fe2cada9a7e704f0d7[.]bin | Triage

Sharing

General

Target

893f6d240413c3fe2cada9a7e704f0d7.bin
Size

248KB
MD5

893f6d240413c3fe2cada9a7e704f0d7
SHA1

7c81c31e0b04423bfefe92fcf41330c22ac5e910
SHA256

451537d9a55472a7e30e776cc1277424c05a94951a7fa7584daeb3a98333e7a6
SHA512

1ac676eea800a38eb5dedc8a1e6e32963a222b8e74bd42a2a2f52a096926bb174a1d307c03578c30c4cdeb88299c8a5b7864f4b58caacdcceea84e19b8582a39
SSDEEP

1536:3zz/E8hW9NdYAygNlvhIoOl9SAKD7PNch1ZmmImh1ADN8blGe5SagvHLNaV8LJ3n:3P/E8k9ZjpIL+zNch12KbAwSaSDJSp8

Score

10^/10

arkei

Malware Config

Signatures

Arkei family
arkei

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893f6d240413c3fe2cada9a7e704f0d7.bin

Files

893f6d240413c3fe2cada9a7e704f0d7.bin
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 864B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ