modestmenuv0[.]9[.]10PREMIUM[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

modestmenuv0.9.10PREMIUM.zip
Size

14.7MB
MD5

4e656c8e3a3ea3c8e562ebc93a794cbe
SHA1

5aa3719c3f6b22259097a081d142d691963bce0b
SHA256

43429f5254778338e7b21ddec791629b05c5bab13f9eccac566a1415099b409c
SHA512

6b02ce60293bc872e6a9614c8f0e55d53527fbeab1090042bd3484aed1f292a79478e6056b27cf2c0552eb78a5bdc2a2c51f9278b0274dd2b8c6f98ede833ac1
SSDEEP

393216:oO4LKZjqtG+kh/JUwReHLsLjbeeE8KohlBM2Dd1rzOI:orKZjLhDUHimEJhDt

Score

7^/10

themida

Malware Config

Signatures

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
static1/unpack001/modest-menu_v0.9.10 PREMIUM/modest-menu.exe	themida

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/modest-menu_v0.9.10 PREMIUM/modest-menu.exe

Files

modestmenuv0.9.10PREMIUM.zip
.zip
modest-menu_v0.9.10 PREMIUM/config.json
modest-menu_v0.9.10 PREMIUM/modest-menu.exe
.exe windows:6 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

Size: 958KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 74KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 23KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.themida
Size: - Virtual size: 20.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.boot
Size: 13.2MB - Virtual size: 13.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
modest-menu_v0.9.10 PREMIUM/scripts/Readme.api
modest-menu_v0.9.10 PREMIUM/scripts/Silent Night v1.67.lua
.js
modest-menu_v0.9.10 PREMIUM/scripts/demo.lua
modest-menu_v0.9.10 PREMIUM/scripts/l3adab.lua
modest-menu_v0.9.10 PREMIUM/scripts/sirius.lua.example
modest-menu_v0.9.10 PREMIUM/scripts/vehicle.lua
modest-menu_v0.9.10 PREMIUM/scripts/weapon.lua
modest-menu_v0.9.10 PREMIUM/teleports.json
modest-menu_v0.9.10 PREMIUM/themes.json
modest-menu_v0.9.10 PREMIUM/vehicles.json

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

Size: 958KB - Virtual size: 1.8MB

Size: 74KB - Virtual size: 173KB

Size: 512B - Virtual size: 17KB

Size: 23KB - Virtual size: 34KB

Size: 1KB - Virtual size: 7KB

.idata Size: 1KB - Virtual size: 4KB

.rsrc Size: 34KB - Virtual size: 34KB

.themida Size: - Virtual size: 20.9MB

.boot Size: 13.2MB - Virtual size: 13.2MB

.idata
Size: 1KB - Virtual size: 4KB

.rsrc
Size: 34KB - Virtual size: 34KB

.themida
Size: - Virtual size: 20.9MB

.boot
Size: 13.2MB - Virtual size: 13.2MB