Behavioral task
behavioral1
Sample
___modest-menu_v1.0.1_[unknowncheats.me]_.rar
Resource
win10v2004-20240802-fr
General
-
Target
___modest-menu_v1.0.1_[unknowncheats.me]_.rar
-
Size
16.8MB
-
MD5
01506eb3c1a0126739aee2a3d6dda0e8
-
SHA1
e37310bf1ffd1ca89616c24cb5ca17aabb8f43cd
-
SHA256
20c221ebed0f94045545b33e94429ad7dcd6aafac53e48f3099dc8e49d6897bf
-
SHA512
28df51261670bd519382514a163ad13c474e55fa9ed5ef0f6ecbc9b459724923114a93fee8b944720ca9b466b25553eaad038fa59a85476abcc90f6b35f345b8
-
SSDEEP
393216:klYBAqrrtEzi3UB7r5OukJ0I9Aigq7/m2n/D3jT1+HdDfgR4:klXqrrMie7rXk+SAij+2n/TjT1+HdDq4
Malware Config
Signatures
-
resource yara_rule static1/unpack001/___modest-menu_v1.0.1_[unknowncheats.me]_/modest-menu.exe themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/___modest-menu_v1.0.1_[unknowncheats.me]_/modest-menu.exe
Files
-
___modest-menu_v1.0.1_[unknowncheats.me]_.rar.rar
-
___modest-menu_v1.0.1_[unknowncheats.me]_/config.json
-
___modest-menu_v1.0.1_[unknowncheats.me]_/modest-menu.exe.exe windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
Size: 1019KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 76KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 23KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.themida Size: - Virtual size: 25.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.boot Size: 15.4MB - Virtual size: 15.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
___modest-menu_v1.0.1_[unknowncheats.me]_/playerlog.json
-
___modest-menu_v1.0.1_[unknowncheats.me]_/playerlog_players.json
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/Model_Changer.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/NoClip_v1.67.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/Readme.api
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/Silent_Night_v1.68_[unknowncheats.me]_.lua.js
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/Ultimate_Menu_V19_1.68.lua.js
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/Ultimate_Menu_V2.1_1.68.lua.js
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/demo.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/menu.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/rainbow.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/sirius.lua.example
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/vehicle.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/scripts/weapon.lua
-
___modest-menu_v1.0.1_[unknowncheats.me]_/teleports.json
-
___modest-menu_v1.0.1_[unknowncheats.me]_/themes.json
-
___modest-menu_v1.0.1_[unknowncheats.me]_/vehicles.json