ARC[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ARC.zip
Size

2.0MB
MD5

265ede705fb8d4063f634aa896625467
SHA1

5396c0d1ce0ec4012864160fc50b6c43263ab19e
SHA256

6e72361e900980567d012d6aacc546439c9299ea93fac62af8ac23fbde1f1c5b
SHA512

121a489d29ed31b38432ae5a03d257339dcc76e00b44313641fd22dfd5a05badacdd8b48bc18e17fbe0cf0b1a660e01446b381670dbc6926c332b25b9f24397f
SSDEEP

49152:ojfAY6Uz9bs1ml0lc2skx/4n6dCkxZY5s+HB8:ojfAi5bswl4c50/U6d3xa5s+G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ARC Studio.exe

Files

ARC.zip
.zip
ARC Studio.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\phoen\source\repos\##ARC Studio\ARC Studio\obj\Release\ARC Studio.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ