ProtonVPN_v3[.]2[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ProtonVPN_v3.2.1.exe
Size

199KB
MD5

a76f9e7966810e99844c981fcff28cb1
SHA1

5957033481c2bfd05f45d13cc5f9a0d44dd60535
SHA256

680142a2cafcc943b14a2b6984f7186e37bcb0bee2a19ef3d878d1213b93f756
SHA512

4e7419a606701beb2f2382a11903c1dc4c708ed126f09e4c884a5e2559098a16789ccbbdc2b067aa1adc6db9c7a44ff46661dbb43ecdd51dfa9885eaa667ec9c
SSDEEP

3072:qY5X8ALUWNTkH+LGP34oCKerVUzeeDXbwa21Dv9ua/aHyvAld2igyk2:qY5sALUUSbwv/yk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProtonVPN_v3.2.1.exe

Files

ProtonVPN_v3.2.1.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ