HauntedModMenu-v1[.]0[.]0[.]zip | Triage

Resubmissions

26/05/2024, 06:51

240526-hmxv4sbd88 3

26/05/2024, 06:48

240526-hk3ctabd22 3

Sharing

Copy URL Twitter E-mail

General

Target

HauntedModMenu-v1.0.0.zip
Size

30KB
MD5

0b23e2a1ad884f5875611b1e0332f401
SHA1

37fdae736e7554c5f53bf0437e9bc6efe081d804
SHA256

23733dc78af0784078e9b5473b816eb8629ce2dc2b70116f163fdfb0376a5a33
SHA512

37a6e3b796e45341fa38742b3d8bfbb94d472b32b123223e5356a85d157318661ab1676914c8dcd5cca8cd43579c1de33a05cd24420aec682229e5176937c1e7
SSDEEP

768:333Ex8ej4viM1VteImez9jEipRLgrPM/Zbfa5TVPPPj6y:H3je0viMjtcezVpRLgA/ZDa515

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BepInEx/plugins/HauntedModMenu/HauntedModMenu.dll

Files

HauntedModMenu-v1.0.0.zip
.zip

Password: iiiiiiiiii
BepInEx/plugins/HauntedModMenu/HauntedModMenu.dll
.dll windows:4 windows x86 arch:x86

Password: iiiiiiiiii

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\David\source\repos\HauntedModMenu\hauntedmodmenu\obj\Release\netstandard2.0\HauntedModMenu.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ