General

  • Target

    modest-menu_v1.0.0_[kiddionsmodmenu.com]_.zip_pw_infected.zip

  • Size

    16.9MB

  • MD5

    46daca94bdb472f751b5e27def758a0d

  • SHA1

    2a506836a4305ba9e3d31e36cc1bc24f57cd2282

  • SHA256

    1ee4756c87be85864523eb712e35a6c50d8f35915d0d9971d948bc57fbbbd60a

  • SHA512

    2e5a3c7e23811c40dcaf657ed5cfba124d5ce4355f19181052b5c18d8e24b0e09028ef1b4f11a10cd0f35849483ac62dbdb9b5ff82c4135c4810d6f2c253d1fa

  • SSDEEP

    393216:7Qv6x29E0oT7ze2n4loWdbYRotxbXfPAYTsEaab0xPHl5:7RiEFT7ze2n7WdmKxzwCbAxPn

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • modest-menu_v1.0.0_[kiddionsmodmenu.com]_.zip_pw_infected.zip
    .zip

    Password: infected

  • 0x0007000000023460-351
    .zip
  • config.json
  • modest-menu.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • scripts/Readme.api
  • scripts/demo.lua
  • scripts/menu.lua
  • scripts/sirius.lua.example
  • scripts/vehicle.lua
  • scripts/weapon.lua
  • themes.json