FRPFILE OPEN MENU_v1[.]2[.]zip | Triage

Resubmissions

04-07-2024 02:38

240704-c4vjeszfkl 3

04-07-2024 02:12

240704-cnczfa1dkg 3

Sharing

General

Target

FRPFILE OPEN MENU_v1.2.zip
Size

31.0MB
MD5

1d2e6b8de3d259738c804a5ca8af854c
SHA1

d5e2fcb9e97844500e16f4e58c523c67528b82d2
SHA256

cd62c400676aceefc0afda0da21a639071928d76d8c34583e7e80b21578357d5
SHA512

72c6148432ecb2cbe1ded9bbd999862292e3559fb34aa9d8b11ba60f6f5a142ee6d0662ff5701ddf0b5e4e594788c6a486851eb4c5fbf0efccaa257ef542cd08
SSDEEP

786432:g2IcBiBrmwDDPLkQBsT6FOsbLavtLUxBGbR:g2IckVmwDHs+lLavYwl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/FRPFILE OPEN MENU_v1.2.exe

Files

FRPFILE OPEN MENU_v1.2.zip
.zip

Password: frpfile
FRPFILE OPEN MENU_v1.2.exe
.exe windows:4 windows x86 arch:x86

Password: frpfile

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31.1MB - Virtual size: 31.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ