Frisla_[unknowncheats[.]me]_[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Frisla_[unknowncheats.me]_.zip
Size

36KB
MD5

20e737521294216a8c760313704348d3
SHA1

891d556db9015776be77b4efb289572941698e55
SHA256

62ea1e722ce37c08bf9bf3edf71277cab787d08599ad15a400036a77a227c6c8
SHA512

6ea9dcc963493959c4e4614edf0782a639c14d9f3915da496fa17ea33a33f7a31e13d5c3f022f40bf593436ff5134032ec55e5a82fb90699cde9075ed284c231
SSDEEP

768:uIxTXKQf8l6m0VY0xspzfYIGeZ0iFYnDiLXYn6czgIl4KzN:mQkUxHxsaZeZFYnW7Y6czgA4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Frisla/Frisla.exe

Files

Frisla_[unknowncheats.me]_.zip
.zip
Frisla/Frisla.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Lil_N\source\repos\Frisla\Frisla\obj\x64\Release\Frisla.pdb

Sections

.text
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Frisla/MenuKeybinds.txt