ARK IN223615[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ARK IN223615.exe
Size

931KB
MD5

0c5b40c41ac5252e035af504bc418b0d
SHA1

425d3e6afdff1d68b55bdefed79aa5a7419272a8
SHA256

e5f129c0cc420a5ff55533075468495e216196bb7ad42c7c88ed2e2e71ecf836
SHA512

a0ccc8b35c45d10484365ca69aabc2d8ebd39e07e9048441de3f1a40034cd565e6d88ba52b8939036521cae426f5aba756e6501c583c9d906359b3d425c97527
SSDEEP

12288:yqSENK36Di8BtL5MeNnR1Wa2R2m4HV0A8VAswD8F19LnWEfo2Cq9mg:jnuFKXv1WxR2lHVDgACLnWOC6m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ARK IN223615.exe

Files

ARK IN223615.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

IbbHc.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ