PhasmoMenu v0[.]5[.]9[.]2 By PappyG_[unknowncheats[.]me]_[.]exe

General

Target
PhasmoMenu v0.5.9.2 By PappyG_[unknowncheats.me]_.exe
Size 7.2MB
Sample260708-l2jhtaes3x
SHA256 781628abba06ac9744fed39849238ecf170b90ca6df9d1b95becd847b717ba3f
MD5 83651abd0dc2ed601e66524a3f06aae6
SHA1 328d9598af7bd0257ec1fb8cac327e4852b8cdbb
SHA512 9671cbc57635a24ed465fb5eafd3ad29b09b7c2b8a401c1800279feccdd5ef5db282e388846684a3cc386d773275d0dd8231a17f61cd83238e4e9258fcf9b73b
SSDEEP 196608:ajtd49IGoOvSQzfIM3hmq7PwHf31VJVVSgGg2Ub0:a/49Ba213pY31VJfSgGTUw
TLSH
T154763326FD43D63BC023B5B84E1690A56934BC315A66924737EA2B4FDEB3BC87E14305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PhasmoMenu v0.5.9.2 By PappyG_[unknowncheats.me]_.exe

File Explorer

PhasmoMenu v0.5.9.2 By PappyG_[unknowncheats.me]_.exe

.exe 7.2MB

PhasmoMenu v0.5.9.2 By PappyG_[unknowncheats.me]_.exe

IMPHASH 8d92fa1956a6a631c642190121740197
SHA256 781628abba06ac9744fed39849238ecf170b90ca6df9d1b95becd847b717ba3f
MD5 83651abd0dc2ed601e66524a3f06aae6
SHA1 328d9598af7bd0257ec1fb8cac327e4852b8cdbb
SHA512 9671cbc57635a24ed465fb5eafd3ad29b09b7c2b8a401c1800279feccdd5ef5db282e388846684a3cc386d773275d0dd8231a17f61cd83238e4e9258fcf9b73b
SSDEEP 196608:ajtd49IGoOvSQzfIM3hmq7PwHf31VJVVSgGg2Ub0:a/49Ba213pY31VJfSgGTUw
TLSH
T154763326FD43D63BC023B5B84E1690A56934BC315A66924737EA2B4FDEB3BC87E14305
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

5611

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shlwapi

PathAddBackslashA PathStripPathA PathRemoveFileSpecA

kernel32

GetModuleFileNameA FindResourceA GetModuleHandleA SizeofResource LoadResource GetTempPathA CreateDirectoryA DeleteFileA CreateFileA WriteFile CloseHandle CreateProcessA WaitForSingleObject RemoveDirectoryA FlushFileBuffers GetTempFileNameA GetCurrentThreadId GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW Sleep GetProcAddress ExitProcess GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage LoadLibraryA InitializeCriticalSectionAndSpinCount HeapAlloc VirtualAlloc HeapReAlloc RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

MessageBoxA

advapi32

ConvertStringSecurityDescriptorToSecurityDescriptorA

Sharing