EXPUNGEDv5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

EXPUNGEDv5.exe
Size

288KB
MD5

d40f27265956211309ee9b5eb82740cf
SHA1

8b97ca108876fe05f22511fdf619c8dfb1d0a729
SHA256

b8ee7b2d6c43b6783862609650a449edffe48d80f78dfc7fd95aed1ff26826bf
SHA512

4ca9a005a8107e8606f38f8c04ab40e70b52fccf1853e6314aad7e1f3111e639cc6581f5437cb8fab1fd1c8df267624f64f335773e85842928acd89b60fe54d6
SSDEEP

3072:6V5bmxNfoPCUf8OYZbB4ya2TKGJA4IPKfjK/S8X:60NQYNB4QKGHC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EXPUNGEDv5.exe

Files

EXPUNGEDv5.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ