General

  • Target

    mdmenu_gta5.zip

  • Size

    33.0MB

  • MD5

    208930f0dcd5688627ce10f9677a2151

  • SHA1

    f38ba5366341a6c7b9ef6d90cc879eeb783efe1a

  • SHA256

    8d9b6717219fcb064347b0d0afae88510cd898bdb6735689b82b33c7fb156b06

  • SHA512

    5c472c3109eefff4f577cc213b77f7632da80229b64cae2fc0994e2c64039f5ab506817da4e287a137616f86794ffb5ca4d14c4ff1d9f41e63a9ad331fb645c0

  • SSDEEP

    786432:TRgb9GlGTy4fzh5UqLipLYiNgCVWORvm13/ex8WOm:TRgb98GTyJaHiN1VWOQl/Rm

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • mdmenu_gta5.zip
    .zip

    Password: 2024

  • MailKit.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • MimeKit.dll
    .dll windows:4 windows x86 arch:x86

    Password: 2024

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • Readme.txt
  • V2/config.json
  • V2/modest-menu.exe
    .exe windows:6 windows x64 arch:x64

    Password: 2024


    Headers

    Sections

  • V2/scripts/Readme.api
  • V2/scripts/demo.lua
  • V2/scripts/menu.lua
  • V2/scripts/sirius.lua.example
  • V2/scripts/vehicle.lua
  • V2/scripts/weapon.lua
  • V2/themes.json
  • config.json
  • modеst-menu.exe
    .exe windows:4 windows x86 arch:x86

    Password: 2024

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • scriрts/Readme.api
  • scriрts/ThirdPartyLegalNotices.css
  • scriрts/remote_settings.ini
  • scriрts/sirius.lua.example
  • scriрts/vehicle.lua
  • scriрts/weapon.lua