o0TjUjTWalbz9p4
Static task
static1
Behavioral task
behavioral1
Sample
V2/modest-menu.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
V2/modest-menu.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
modest-menu.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
modest-menu.exe
Resource
win10v2004-20231215-en
General
-
Target
mod menu gta 5.rar
-
Size
616KB
-
MD5
8de2d061ba5e04e2c48e4dd8db48837a
-
SHA1
52fbbed730545ba202e8a83fb0a9a3b3974589d0
-
SHA256
03022ec247910297d50399fe181651318c066349768a1775743ef603961bebc9
-
SHA512
f01d2aadcbc8905029f9baaefc1c44c7da5aa07efe5886952e7219b528e6e6ac5388cf43c1879d4c7428c23675aac62980a53b6a871ac67f3a7b9af37e8228ae
-
SSDEEP
12288:lV22s1EMXrGlNR/dTuOkTP+ywh1PciFAFeYr5P5oCA6oueb:lg2s1EgYR/RkTPY1ciEeY/odb
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/V2/modest-menu.exe unpack001/modest-menu.exe
Files
-
mod menu gta 5.rar.rar
Password: 2023
-
Read before installing.txt
-
V2/modest-menu.exe.exe windows:4 windows x86 arch:x86
Password: 2023
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 391KB - Virtual size: 390KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
config.json
-
modest-menu.exe.exe windows:6 windows x86 arch:x86
Password: 2023
e752126f7ead8b7c9b1a7360355346dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
LoadLibraryA
GetProcAddress
VirtualProtect
lstrlenW
CreateThread
Sleep
WaitForSingleObject
FreeConsole
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
EncodePointer
DecodePointer
InitializeCriticalSectionEx
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
CreateFileW
RaiseException
RtlUnwind
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapFree
HeapAlloc
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
HeapReAlloc
HeapSize
WriteConsoleW
Exports
Exports
Sections
.text Size: 165KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 304KB - Virtual size: 307KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.mk8F Size: 68KB - Virtual size: 72KB
IMAGE_SCN_MEM_READ
-
scriрts/Readme.api
-
scriрts/demo.lua
-
scriрts/menu.lua
-
scriрts/remote_settings.ini