General

  • Target

    kid.zip

  • Size

    17.1MB

  • MD5

    e6fa03c9934b495a4bf6c964e870fe83

  • SHA1

    6c663b5ea5c96e35aa84fb8eae58f63f12e50350

  • SHA256

    29acf6e586055295b5228db327ff3ab74f29f493971dd4f9ee32602143b85dd1

  • SHA512

    48e1be18d0efeacc727e17e337edb125d0c179cb2a7338e2395d5380b5d4fe7dc99ca68e9b8ce911707ea7bf04a2084bf8cbbf5bb3ff18a6d2b6c4555496851d

  • SSDEEP

    393216:LCgs1848MPygIlJAGtH2TI/E/12tQNrpcrndG:LPsy3CygIzAAHc/dhlcrY

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • kid.zip
    .zip
  • kid/config.json
  • kid/modest-menu.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • kid/scripts/Readme.api
  • kid/scripts/Silent.Night.v1.68.lua
  • kid/scripts/Ultimate_Menu_V19_1.68.lua
    .js
  • kid/scripts/demo.lua
  • kid/scripts/kiddionsscript to max stats.lua
  • kid/scripts/sirius.lua.example
  • kid/scripts/uhTransactions.lua
    .js
  • kid/scripts/vehicle.lua
  • kid/scripts/weapon.lua
  • kid/teleports.json
  • kid/themes.json
  • kid/vehicles.json