EXPUNGEDv4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EXPUNGEDv4.exe
Size

290KB
MD5

0bfb7ae954343dc42c1a5c9b3329a65f
SHA1

2b1693c19a8ce5c253b9db76f09cfe81d6038e9d
SHA256

617e633a917f376e5e23496ea86d2abc57f909abd80016e10dbe283759f31826
SHA512

4939c842fddce43e224f28b94837ef2d0d4dd4d32aa2d661da21e9f1239d3985cb7848207132daa5857e250f6d505e195c29d171b2b9ef19ef486510ebb5673f
SSDEEP

3072:In6wr7xNfoPCUf8OYZbB4ya2TKGJA4IPKfjK/S80:u/NQYNB4QKGHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EXPUNGEDv4.exe

Files

EXPUNGEDv4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ