Behavioral task
behavioral1
Sample
modest-menu_v0.9.3/modest-menu.exe
Resource
win7-20240708-en
General
-
Target
modest-menu_v0.9.3_unknowncheats.me_.zip
-
Size
11.5MB
-
MD5
e00d12c8a5912b4cd4e8e399a0963d01
-
SHA1
3fae4d4d7198d91477362d48ee3500eaebb9c511
-
SHA256
bdb3617b937c03e6ad1ea0ec30383dd9a36d8daebcacd87b7d3529cced9c741f
-
SHA512
a3ad23babb03d4ca0ea49dab990a1d3a0ad6add93de22d4122de82eef394f698b86441d6bd91c0c5e6eed0f3d5b8ee571958e7fb4cd47dbabd987fefb046eaf6
-
SSDEEP
196608:IAlNXUCI/MGc5iyM2mXmaHRpLvZ9dzb0pfx/651t3NHsTU4QjOxaaSK1iCFiJD:rXOMHRM2mXmaxxR9dzb0RQNB5fBaSlJD
Malware Config
Signatures
-
resource yara_rule static1/unpack001/modest-menu_v0.9.3/modest-menu.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/modest-menu_v0.9.3/modest-menu.exe
Files
-
modest-menu_v0.9.3_unknowncheats.me_.zip.zip
-
modest-menu_v0.9.3/config.json
-
modest-menu_v0.9.3/modest-menu.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 701KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 60KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 264B - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.imports Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 16.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 10.7MB - Virtual size: 10.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
modest-menu_v0.9.3/scripts/Readme.api
-
modest-menu_v0.9.3/scripts/demo.lua
-
modest-menu_v0.9.3/scripts/menu.lua
-
modest-menu_v0.9.3/scripts/sirius.lua.example
-
modest-menu_v0.9.3/scripts/vehicle.lua
-
modest-menu_v0.9.3/scripts/weapon.lua