845e03-Essential-Menu-1.2.3.zip
- SHA256 eb41a4c8e43f7f712133b772bf2669c5a564ecae57f256985af67fe6a1700df3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
essentialmenu-by-Anonik.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
essentialmenu-by-Anonik.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
20 signatures
150 seconds
Behavioral task
behavioral3
Sample
scripts/Essential-Menu.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
scripts/Essential-Menu.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
General
- Target 845e03-Essential-Menu-1.2.3.zip
- Size 16.3MB
- Sample260706-b2cedscx7m
- SHA256 eb41a4c8e43f7f712133b772bf2669c5a564ecae57f256985af67fe6a1700df3
- MD5 18691f3139233152929b241ccba22445
- SHA1 8e072f8a9f6617722d89213a56ddd581f5f40209
- SHA512 33936bdbe5bbaecf670b9b6e2f642fa64b1ee38dc9d1ab4a2fe314d72742b9326f8f2637431a2dc14e8b63862615d3c5d64bd258c262a2bd160a2cebae165dd6
- SSDEEP 393216:uouY/QuZmdCOVOHtPIo2jkgMvul5YEMqqeP9UwyMPk:uo1/bbOVg99i5YfwPjyM8
- TLSH T19D0733DD25657910FA05503623AB4C42C7BBD8F7A58CC3690DFB72A679833E0CB3592A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/essentialmenu-by-Anonik.exe unpack001/scripts/Essential-Menu.dll
File Explorer
-
845e03-Essential-Menu-1.2.3.zip.zip 16.3MB
-
changelog.txt3KB
-
essentialmenu-by-Anonik.exe.exe 46.1MB
-
essentialmenu-by-Anonik.pyc45KB
-
readme.txt258B
-
scripts/Essential-Menu.dll.dll 78KB
-
scripts/carBanner.jpg.jpg 43KB
-
scripts/essentialconfig.ini42B
-
scripts/mainBanner.jpg.jpg 74KB
-
scripts/moneyBanner.jpg.jpg 43KB
-
scripts/teleportBanner.jpg.jpg 86KB
-
scripts/weaponsBanner.jpg.jpg 70KB
-
scripts/weatherBanner.jpg.jpg 50KB
changelog.txt
- SHA256 2c80b7b95f0867155ccb3776b051da78044cdb6bfb073833e1716eccf12d3b76
- MD5 ae3274a71291813262d4fe145577e495
- SHA1 effbc4564de3afc2ea41bb3f2246dfd68390df93
- SHA512 806d687d81d08af70fd11aa36e0939d9bf02041a6f975f944381a1f59770f5ae3628485f837916429ef0b5784c41224e0b916f9694b9e890ec462eaaf1d7cc17
- TLSH T1D1710E2D718B37BB6A47E0CEC24A38B1FC7D9158F7864435B8647E0C017906AABDE15C
- MD5 SHA1 SHA512 TLSH
essentialmenu-by-Anonik.exe
- IMPHASH f4f2e2b03fe5666a721620fcea3aea9b
- SHA256 eb505549a8ff64ba5035566cce9f22ae3d8a5083142cde60b4a5d5402b76a2b4
- MD5 109ad9ca603f372c99b5db9d769b97ed
- SHA1 c49e036d00c58c190baaa7eef6270756d07853b9
- SHA512 114ae0262b56e6a541814ee20838ed533c1841673a03b1ef8d7a6d93e7e09699e84e0f4ee650aec45a75daf2113b0da446bc52727d952afc29d81bd326e88b6a
- SSDEEP 393216:ov90+5gDkTh2Jp5MwurEUWjsrz7E5PKk9buK+x:W9PvThidb8z7bkEK+
- TLSH T1F9B73399376054A4F986103B966BC8019777FCB25798C39F0AF831A62F437E0CD3AE65
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
50496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
GetACP
GetOEMCP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
CreateFileW
GetFinalPathNameByHandleW
CloseHandle
GetModuleFileNameW
CreateSymbolicLinkW
GetCPInfo
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEndOfFile
GetProcAddress
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
172KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
76KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=259, version=30795,
count=188, id=261, version=30795,
count=10, id=260, version=30795,
count=1, productName=Unmarked objects (old),
count=4, id=253, version=33030,
count=40, id=261, version=33030,
count=17, id=260, version=33030,
count=17, id=259, version=33030,
count=11, id=257, version=30795,
count=142, id=1, productName=Unmarked objects,
count=21, id=260, version=33135,
count=1, id=258, version=33135,
essentialmenu-by-Anonik.pyc
- SHA256 078076f1c019cd6b7c082d31e4a57ac4f0496c39228e926f0d195574de8898b6
- MD5 95b40ad63e7c3b172ec32efb3a369d7e
- SHA1 a37ff7131a745290b1788d2bb6bc05eb06627091
- SHA512 9402bad51be90addf39f487c1ff93a0b6634cba875e2f3d43563bc7638a0b4668f1dfa088da477f55d2585a9059734500f00359b748556df3c49f605db948565
- SSDEEP 768:e9JWPqdSZvEqJ/j7ZqdCvuWXoqI0TtBkloXqXz2OpoUNgIGm93y70cQDlhLx3Z9:e9JWPqI8q/odCvEqptLXIz2OyuB3yaDB
- TLSH T1D723BFA930D3C2FFF416F27158BF268DB37A8176FF47CB2B749940606D952605908AAC
- MD5 SHA1 SHA512 SSDEEP TLSH
readme.txt
- SHA256 ad65e5b1ab77f6c6892a0ba1f2416bb9219b1af59eb745da29137c88aed3b5a9
- MD5 75b2f8f136d0637788afb4b00f8bccb4
- SHA1 ee68cc802563d1942c2868d458cedefbc56ba147
- SHA512 5067f61ddfa9d0ef8a9b1a41879f2a969460482b45cdcee317dad5b2bae823e6fda82f12c75014ad13c6ab337aa65e368ed804e242500906ccd4ada0c063ed22
- TLSH T185D095577ECFE674074157F543DBC840B30D064ED051798414E56D1C5301EC000DD5CC
- MD5 SHA1 SHA512 TLSH
scripts/Essential-Menu.dll
- SHA256 de5534cd8432f779615a1bb50b5b4767f135cccfddd1346e413441a7ee026be3
- MD5 141c717176fde62a3c2248759203b71a
- SHA1 fa1799df2ec8b8884b64db321cfa5db954dcda96
- SHA512 29d4cd334d489d06a02a87c9f43f59becb4d9ddee4a2d5515c6f58e986e1b01a89d31afe32407faed24a15061e8f02b9aa218e5171a43dcca716c693c2d249d2
- SSDEEP 1536:INbLCagOaBn/nPpuJsYpLg8cCUDl8PL6+IXV0vtLSQPi0gdz:INnCvO1KXVYLSQzaz
- TLSH T1BD73831C32FC0942F27F5BBA69F110624BB479639630C3DD4DC2E6DA2422B819D56F6B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\impie\Desktop\Essential-Menu-1.2.2\Essential-Menu-1.2.2\ModMenu\obj\x64\Debug\ModMenu.pdb
Name
.text
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
scripts/carBanner.jpg
- SHA256 aadbf02232266083fd2489b32ccd8c5a21d9dd32fee180f58a29f1b09b60354b
- MD5 f7e376c5d7d1c0b017879102b5b65a67
- SHA1 3e7b6c1e65634668b4edc2e61ff3fd50a69af565
- SHA512 b8a1df8a28be9d040e11ccb5aeddf2f3d8988bd33cf4007bf0c6f86ed3abff977ab7453604905d5121e67bb7aa3ee88898222986d69b62d1dbcaab1dd6604455
- SSDEEP 768:u7a0Ad1MNDF3PLqvx17kiuzhuHLrzuG18CNsLIoMR:10Adavqz7lugPSIlR
- TLSH T1D813D081F357CDA3EC9996B714E6D2422230FF4857F342963ECC7948BF76212E429686
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/essentialconfig.ini
- SHA256 c9fc4bdbaa14d87ba6caab16a4df851084fcf194d25900adac09d1136cb628b8
- MD5 6f27f79540b1eea11b7f1f2c4b5bc693
- SHA1 5583847aed61d38cd941530c5af772333b38a3ae
- SHA512 c481dd5d21c46cb0cc476431fe3228e2faaf0f0c20ca6f96b5ff591eaee2a9c525a138d2f21ea796bea7655fa571a0ed5446f4ec009b51819841781d7e61f43c
- MD5 SHA1 SHA512
scripts/mainBanner.jpg
- SHA256 7057d64a6a1ba36c40e1e25c4c994062614d5b71cf51b7ae9dcc32051d8ca005
- MD5 98a0020b22ed11207a88b86d7f87446c
- SHA1 6c3c1473f6ab86c4b1d5b9ac32aea8901694f6d4
- SHA512 8995865e6f4238d5ad23ae2e1f84b220bc07a8397fd962361487bf68b3e9801633b7b2e0e0d49a7196ae907bf7b1ba99401c1e670cf45f0796ab531bf211a9a3
- SSDEEP 1536:objLqrpROvwLQTWoj7RiBMw+Iujpx9nHP+lcxUJipnPjCw:cjqpRDQj7RgL+IwxP+lcxAq7
- TLSH T144730202F90B82B19B9E5AB6C85E978F3033F6FE8E9D6F49046B87E4E190345D854C1D
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/moneyBanner.jpg
- SHA256 d56362f74389bc55ed2b024e08131f362b197ef4aa9f1e620acfa8349d218776
- MD5 f010335910a18df218c9e3afaa518e6b
- SHA1 2c477262cc22c8a7619133a0d45a7909de1c4f9d
- SHA512 144febd0b66a03905d5b8b9ce669e147c106f63a62c0f67ad657360fef2912a964b461782ec096fb70c96a4713d4fcdbda930a0fa0ad861e7154a4ed864057a2
- SSDEEP 768:m7wC69KTdyVv+jLQ5dPpZEgJjoDPZw3tlr9twPB1M//j:U69ed8WjCFJjoLZw3zHwPB1uL
- TLSH T15F13D094FBD38F26EFD0A93C95C6829A6B651F1689D3B141B49E7D423B342C08ED4743
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/teleportBanner.jpg
- SHA256 1fdc2a274a06ef662aa704c20dfa5f02ee3bf2e038dab9e0b283ff4992a601c9
- MD5 0716b3f8fd8147ec73b1457a3bbcdcb2
- SHA1 00e1eebd82c0c9af6dcacffd5294929e08fe42b3
- SHA512 2903674f8848b88f1807159cf00d4ddeba30f82d5f5ebccb3e70d58ab4fcbcccdcfc1e6ed841605e94cc2fcd77faa8ada164b41abc22dcb3376a9e8db40a0e5c
- SSDEEP 1536:hO/O8b4eihS+x1Gj2NigOjSXE6YHJyhXMdwVxE2j6/LUV05wKpo122djwLAy3kEv:wWPLkE1GjYHI0VMdwVW2j6QVWwEoLHq3
- TLSH T19183022EF7436DB4F8E9917890A0F68D6C61EFAC91374706799E8495BF28F811E9C103
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/weaponsBanner.jpg
- SHA256 7494772534044cedf8c38cc18116071b4ed657418c4ee7e81b027c9dba300442
- MD5 23992e38a37a743c787bebd0d35d9960
- SHA1 d4c7fbd87b9d32ea6fbc0d25505f5f307a1bd9ed
- SHA512 f5a01200d53ab801a9229e664cccf853a67eca6a1a10c91f9f81b791ec19dcf8cb985a22beb379a50e78790cdd89817759ecd452ef3fe191223f3a9054ebac34
- SSDEEP 1536:tMSSKdKNhEgBwVO6rzeT8y9MCoXUp+G72Wlps0nWonCM0hXamMQ2Uis:BSqKNhFBwA6rzK8MMHkp+Gy6VWoxfFPs
- TLSH T18363F1D93E170DA789EC08A5EBD0D169211F123C335A276B9DB982C5FC8CA8790C1DF9
- MD5 SHA1 SHA512 SSDEEP TLSH
scripts/weatherBanner.jpg
- SHA256 6531b401423645ea3c4d722fbe41155d48738f0cf0100ad8c352820d087a1030
- MD5 535d65fe38cc659ee2a5a28689c7583b
- SHA1 d72b045187c4cb0a12596c36a316db721ae8d2d5
- SHA512 499efe77350006420f9ce6165651175f5c38a3f87995233207f84105c371e1f1a9a7a5372eac142b6e167bc882e58a7cebccca4f7f0720075aba189afd124ad0
- SSDEEP 1536:CpdEWZwVG1UlBZRUo4nrZSe6cpCxlZoHbNN:9Ee794np9pC/ZoxN
- TLSH T19B33E131F7C2CE53F4F80231886A8749EB339E9566C76306799E71483F33669846D509
- MD5 SHA1 SHA512 SSDEEP TLSH