LoginMenu[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

LoginMenu.rar
Size

12.0MB
MD5

e551834ac1f21298b28b3e11272c3cf0
SHA1

631b721691842a33d10440a1f406b1c9da139a37
SHA256

81e11442e555ab7d3c8a35df16dd5f3e1c786a2ab93985b9f22d8c88251159af
SHA512

2a663987434c39e910371f5c8ffbbeb185292128a8489f4bde0a9189c2e45ca495f58f07dd17a40715d8784f6ae79515ec767490bb0846ffbdf54b1d0294ea5b
SSDEEP

196608:R9szW/gIm8fxWJn9fX99VUewygAqXROh7ultyDMnxQS8LoOtTXaf6ci/bIl1ttmL:R9Kypon9FvwygA0syuMnwLH9cmKK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/LoginMenu/LoginMenu.exe

Files

LoginMenu.rar
.rar
LoginMenu/2024.2.29.txt
LoginMenu/LoginMenu.exe
.exe windows:6 windows x64 arch:x64

1ad7f4f793d3408af074e491860f5a6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CloseHandle

advapi32

ChangeServiceConfigA

user32

MessageBoxA

shlwapi

PathFileExistsW

wininet

HttpQueryInfoA

Sections

.text
Size: - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 972KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: - Virtual size: 140B

.syscall
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.=5Q
Size: - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ceJ
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Q,}
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 411B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ad7f4f793d3408af074e491860f5a6b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

user32

shlwapi

wininet

Sections

.text Size: - Virtual size: 226KB

.rdata Size: - Virtual size: 71KB

.data Size: - Virtual size: 972KB

.pdata Size: - Virtual size: 11KB

.00cfg Size: - Virtual size: 56B

.gxfg Size: - Virtual size: 8KB

.retplne Size: - Virtual size: 140B

.syscall Size: - Virtual size: 4KB

_RDATA Size: - Virtual size: 500B

.=5Q Size: - Virtual size: 7.5MB

.ceJ Size: 512B - Virtual size: 128B

.Q,} Size: 13.6MB - Virtual size: 13.6MB

.rsrc Size: 512B - Virtual size: 411B

.reloc Size: 512B - Virtual size: 228B

.text
Size: - Virtual size: 226KB

.rdata
Size: - Virtual size: 71KB

.data
Size: - Virtual size: 972KB

.pdata
Size: - Virtual size: 11KB

.00cfg
Size: - Virtual size: 56B

.gxfg
Size: - Virtual size: 8KB

.retplne
Size: - Virtual size: 140B

.syscall
Size: - Virtual size: 4KB

_RDATA
Size: - Virtual size: 500B

.=5Q
Size: - Virtual size: 7.5MB

.ceJ
Size: 512B - Virtual size: 128B

.Q,}
Size: 13.6MB - Virtual size: 13.6MB

.rsrc
Size: 512B - Virtual size: 411B

.reloc
Size: 512B - Virtual size: 228B