Protosmasher[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Protosmasher.exe
Size

102KB
MD5

9e1dcbf33c56c7e246f4b8bf7fa906f2
SHA1

f551ef1c234e3158525a594a9962618d534b3bc6
SHA256

6ac7b4adfe8a83b25526bef225f37a4e6241e5e51fb7ba694aa2041612e626a5
SHA512

1d4ada20367aa42da3d5ff91caa54ea433b1f003a7dc29a263da69daddcd28b4ba5c37e5fa2306da12e2afde5a03551bc8feb9029ee70c7857856213dac766f4
SSDEEP

1536:ccecpoRupAg2br+auxmdH3kuRimIFy3gc+D+vVZUUDQVELOD7E/wNQ4:RpAgG+tmdXhchuv+avvBQ97E/wNQ4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Protosmasher.exe

Files

Protosmasher.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ