Static task
static1
General
-
Target
Protosmasher.exe
-
Size
133KB
-
MD5
0dbe2fab14c411da1860311829c4ccca
-
SHA1
667efeadc0e78c416fca5339a7d17e23a2c53a81
-
SHA256
87a1765cc09b7ede590961bd6748d94a7f176564ac7a5aa836f2110240e76e7e
-
SHA512
c951b12251e82559445ef15d36fb4e8e1563d3edd4b73dcc6db8c7b1be0c05c24fb810a8104abcfb99f8475c7d102a0aa8d0ad6a15d2537c6243fe55c672bff2
-
SSDEEP
3072:ZGvHvZckNx5y9DUyFG6lEjqZ4q/iXaGYjpO2et2eQ2ep:ZGvHvZckNxCDUyFG6lEjqZ4q/iXglDI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Protosmasher.exe
Files
-
Protosmasher.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ