General

  • Target

    mod.zip

  • Size

    16.9MB

  • MD5

    d5b24b9a33287947230fcd2473f41db9

  • SHA1

    4adede7b86d70b403ba940e68325f26e14b20e0c

  • SHA256

    d6c71a05c027ad106485864e1f7539f7e5b2d0384798745869da2c70c8a23beb

  • SHA512

    706c5c5a41a2603fa35b166733381c9dda1097b2402bee8fbde4e2db3f0c37cde4c48c85d57a948eac9a0b0bce71d48ea8525b8e08f7a8abefff4d9bfdd2c114

  • SSDEEP

    393216:5niLs0qsO/6QDfgiq68isBizB9j/trT77KZeupBroLp:5niTq/6QDI/tBiF9jFrv7KZeufol

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • mod.zip
    .zip
  • simon mimon/config.json
  • simon mimon/modest-menu.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • simon mimon/scripts/Readme.api
  • simon mimon/scripts/demo.lua
  • simon mimon/scripts/menu.lua
  • simon mimon/scripts/sirius.lua.example
  • simon mimon/scripts/vehicle.lua
  • simon mimon/scripts/weapon.lua
  • simon mimon/themes.json