Kiddions 0[.]9[.]8 Pack[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Kiddions 0.9.8 Pack.zip
Size

45.8MB
MD5

bbf5581787c70a0ab2f5114d5ce095e6
SHA1

a0416cc3870f70b3fd6674c40e94319406376925
SHA256

301826dee5788e0cc83ead22b04a1f5c8e4fe29cf1a2a8c1c556eb7712cac2fe
SHA512

1ea9a433b185aa770995e0215fa529968b64aec663f46d0f1f432f864bf542d2fee8b0741f7b3d184587b80dd6aa8ce89e64d7298de3e6d3259932a4b75032e0
SSDEEP

786432:GYkcdAcLHbcnM/t5Wh/6HpdpdoScf4YkcdAcLHbcnM/t5Wh/6HpdpdoScf0Ykcdf:GGhLA0tQ/Sp9cf4GhLA0tQ/Sp9cf0GhZ

Score

7^/10

themida

Malware Config

Signatures

Themida packer 3 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
static1/unpack001/Kiddions 0.9.8 100% Keyboard/modest-menu.exe	themida
static1/unpack001/Kiddions 0.9.8 60% Keyboard/modest-menu.exe	themida
static1/unpack001/Kiddions 0.9.8 65% Keyboard/modest-menu.exe	themida

Files

Kiddions 0.9.8 Pack.zip
.zip
Kiddions 0.9.8 100% Keyboard/README.txt
Kiddions 0.9.8 100% Keyboard/config.json
Kiddions 0.9.8 100% Keyboard/modest-menu.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 902KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 71KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 23KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 21.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Kiddions 0.9.8 100% Keyboard/scripts/Readme.api
Kiddions 0.9.8 100% Keyboard/scripts/demo.lua
Kiddions 0.9.8 100% Keyboard/scripts/sirius.lua.example
Kiddions 0.9.8 100% Keyboard/scripts/vehicle.lua
Kiddions 0.9.8 100% Keyboard/scripts/weapon.lua
Kiddions 0.9.8 100% Keyboard/teleports.json
Kiddions 0.9.8 100% Keyboard/themes.json
Kiddions 0.9.8 100% Keyboard/vehicles.json
Kiddions 0.9.8 60% Keyboard/README.txt
Kiddions 0.9.8 60% Keyboard/config.json
Kiddions 0.9.8 60% Keyboard/modest-menu.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 902KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 71KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 23KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 21.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Kiddions 0.9.8 60% Keyboard/scripts/Readme.api
Kiddions 0.9.8 60% Keyboard/scripts/demo.lua
Kiddions 0.9.8 60% Keyboard/scripts/sirius.lua.example
Kiddions 0.9.8 60% Keyboard/scripts/vehicle.lua
Kiddions 0.9.8 60% Keyboard/scripts/weapon.lua
Kiddions 0.9.8 60% Keyboard/teleports.json
Kiddions 0.9.8 60% Keyboard/themes.json
Kiddions 0.9.8 60% Keyboard/vehicles.json
Kiddions 0.9.8 65% Keyboard/README.txt
Kiddions 0.9.8 65% Keyboard/config.json
Kiddions 0.9.8 65% Keyboard/modest-menu.exe
.exe windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 902KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 71KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 23KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 21.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 14.3MB - Virtual size: 14.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Kiddions 0.9.8 65% Keyboard/scripts/Readme.api
Kiddions 0.9.8 65% Keyboard/scripts/demo.lua
Kiddions 0.9.8 65% Keyboard/scripts/sirius.lua.example
Kiddions 0.9.8 65% Keyboard/scripts/vehicle.lua
Kiddions 0.9.8 65% Keyboard/scripts/weapon.lua
Kiddions 0.9.8 65% Keyboard/teleports.json
Kiddions 0.9.8 65% Keyboard/themes.json
Kiddions 0.9.8 65% Keyboard/vehicles.json
Troubleshooting.txt

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: 902KB - Virtual size: 1.7MB

Size: 71KB - Virtual size: 166KB

Size: 512B - Virtual size: 17KB

Size: 23KB - Virtual size: 34KB

Size: 1KB - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 34KB - Virtual size: 34KB

.themida Size: - Virtual size: 21.7MB

.boot Size: 14.3MB - Virtual size: 14.3MB

Headers

DLL Characteristics

File Characteristics

Sections

Size: 902KB - Virtual size: 1.7MB

Size: 71KB - Virtual size: 166KB

Size: 512B - Virtual size: 17KB

Size: 23KB - Virtual size: 34KB

Size: 1KB - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 34KB - Virtual size: 34KB

.themida Size: - Virtual size: 21.7MB

.boot Size: 14.3MB - Virtual size: 14.3MB

Headers

DLL Characteristics

File Characteristics

Sections

Size: 902KB - Virtual size: 1.7MB

Size: 71KB - Virtual size: 166KB

Size: 512B - Virtual size: 17KB

Size: 23KB - Virtual size: 34KB

Size: 1KB - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 34KB - Virtual size: 34KB

.themida Size: - Virtual size: 21.7MB

.boot Size: 14.3MB - Virtual size: 14.3MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 34KB - Virtual size: 34KB

.themida
Size: - Virtual size: 21.7MB

.boot
Size: 14.3MB - Virtual size: 14.3MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 34KB - Virtual size: 34KB

.themida
Size: - Virtual size: 21.7MB

.boot
Size: 14.3MB - Virtual size: 14.3MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 34KB - Virtual size: 34KB

.themida
Size: - Virtual size: 21.7MB

.boot
Size: 14.3MB - Virtual size: 14.3MB