Behavioral task
behavioral1
Sample
Setup.exe
Resource
win7-20230220-en
General
-
Target
GTA5 Mod Menu.rar
-
Size
6.7MB
-
MD5
312909947a74910448b5101ab178362e
-
SHA1
2d144731419241fb8f2527a33d21a34e1e16bf5f
-
SHA256
f7e73bcbbc91b8cebfdb4c4d4c5f43eb07ba06ce67fa531b28321cfbff57dbab
-
SHA512
d5b5d3f70600a86d8fb46a67d9714d819dab25b257d8fab166cc01c65bb7d3d9bacf673611fb1ee9b1bc5eaa40302f1430239fa84f8cb00144187c500d4d7877
-
SSDEEP
196608:LJoPB4Mbe6HH/wChXqTgvvC2oL2T5bOS8KE8o:6WHk/BhHT5bOS8K2
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Setup.exe themida
Files
-
GTA5 Mod Menu.rar.rar
-
ActiveReign/ActiveReign.egg-info/SOURCES.txt
-
ActiveReign/ActiveReign.egg-info/dependency_links.txt
-
ActiveReign/ActiveReign.egg-info/entry_points.txt
-
ActiveReign/ActiveReign.egg-info/requires.txt
-
ActiveReign/ActiveReign.egg-info/top_level.txt
-
ActiveReign/README.md
-
ActiveReign/impacket/README.md
-
ActiveReign/impacket/impacket.egg-info/SOURCES.txt
-
ActiveReign/impacket/impacket.egg-info/dependency_links.txt
-
ActiveReign/impacket/impacket.egg-info/requires.txt
-
ActiveReign/impacket/impacket.egg-info/top_level.txt
-
ActiveReign/impacket/requirements.txt
-
ActiveReign/impacket/tests/ImpactPacket/runalltestcases.bat
-
ActiveReign/impacket/tests/dot11/runalltestcases.bat
-
ActiveReign/impacket/tests/misc/runalltestcases.bat
-
ActiveReign/impacket/tox.ini
-
ActiveReign/requirements.txt
-
Setup.exe.exe windows x64
Password: 1234
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 738KB - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 378KB - Virtual size: 378KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.themida Size: - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ