frps[.]exe | Triage

Sharing

General

Target

frps.exe
Size

5.0MB
MD5

62c4405278e22cc84223d95e2485acd4
SHA1

5a73e31925343373b8f630feb912321b8567d5f1
SHA256

d36feb6fcfe7cfaa31fe4c924d99f847e37e815e428d9358df09b6595e03c65b
SHA512

d0ab097ff7816e98a4ea0008ae03da3a202523f6e3dbbda979cd55e485b8c9dca920f92601f3e87baac88a3007185532421085ea0f9994b9791bd538825f2a0f
SSDEEP

98304:8eUVNPO6TGRivaHAZZWIPjN67Adz+dtTDj4sq9BwhQR:8emNSivaqWILkMdzAVj4sqH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
frps.exe

Files

frps.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

U0X0
Size: - Virtual size: 9.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U0X1
Size: 5.0MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

U0X2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE