EXPUNGEDv3[.]exe | Triage

Sharing

General

Target

EXPUNGEDv3.exe
Size

290KB
MD5

d8226317108044054e82c1e68fda8a47
SHA1

509f7238935d1130dae843b07f2d81aa9b57b1bc
SHA256

8a52bc2c0c8e66a9b1f638763200438b9a611a9d990cc6f95b3d089832e8455b
SHA512

4b5a407f84da5c6c621046df0f26d777ea43f220155aef02ebf0f549d3661cd0cbc8057e8c9e5acf1c28d6057d67c89b77df69a545c321e50695475962fd5881
SSDEEP

3072:ClPur1xNfoPCUf8OYZbB4ya2TKGJA4IPKfjK/S8R:ClwNQYNB4QKGHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EXPUNGEDv3.exe

Files

EXPUNGEDv3.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ