AryaMenu-Loader[.]zip

Resubmissions

23/07/2026, 05:10

260723-ftshvsek2w3

23/07/2026, 05:09

260723-ftdpps1eqc3

Sharing

Copy URL Twitter E-mail

General

Target
AryaMenu-Loader.zip
Size 18.4MB
Sample260723-ftdpps1eqc
SHA256 fecc3841c6b9305342219ae39d112b0dad9da5aad8784bf481564062fb2ab0cf
MD5 fe362d15cc0c7890a38243cb831d15ce
SHA1 70f1ea17cfa3161489343d8ebb13ef0d5a50fd07
SHA512 46fc938b6605ee320e4b4ee87a7f344a6d885859865b0e09f64ee1f7b121a8e31542328e232db9a740ee4530921658be9ce9573aeac4d2e2db6774e47b2096fb
SSDEEP 393216:glhSUI5LI+5ygHJVdwBm3SLuN61t+7hOwgsdILOkN:gXSUIadaXwr6N61t+7Iwg3LzN
TLSH
T19E1733F9C7A4E4BE8BDAC63A10E0DDB7CCD5799CAB80DB05A3D9889315F9055081B3E1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/loader.exe

File Explorer

AryaMenu-Loader.zip

.zip 18.4MB
.config

36B
loader.exe

.exe 20.1MB

AryaMenu-Loader.zip

SHA256 fecc3841c6b9305342219ae39d112b0dad9da5aad8784bf481564062fb2ab0cf
MD5 fe362d15cc0c7890a38243cb831d15ce
SHA1 70f1ea17cfa3161489343d8ebb13ef0d5a50fd07
SHA512 46fc938b6605ee320e4b4ee87a7f344a6d885859865b0e09f64ee1f7b121a8e31542328e232db9a740ee4530921658be9ce9573aeac4d2e2db6774e47b2096fb
SSDEEP 393216:glhSUI5LI+5ygHJVdwBm3SLuN61t+7hOwgsdILOkN:gXSUIadaXwr6N61t+7Iwg3LzN
TLSH
T19E1733F9C7A4E4BE8BDAC63A10E0DDB7CCD5799CAB80DB05A3D9889315F9055081B3E1
MD5 SHA1 SHA512 SSDEEP TLSH

loader.exe

IMPHASH cf125eacfe25296a43ff37467c728d88
SHA256 620890674d5fd3607e26f034b1d4a020956fe1902cb80824293ee4a49f344e0c
MD5 8e54a8042b791d5f01cf529f0054c735
SHA1 3109b69ff6fca35c6649849a7b9202ed7958f809
SHA512 f96274111693e661e00f2cde795babd4db9ca9a4827fbe9dd530d1df83d8add14bea4fdc193764b6168d71f74058a37c8b34bd2ccd8accc11d77e3aa949728fe
SSDEEP 393216:ywbZdiw0459I+BU61NfNE74bQGn18C0QpG8:1bZdS4c10lEXGn18C0QpG8
TLSH
T1662723D7C6C44BF48793854DA09B03CFF1C0A59AD7EA5E0D3A865C0236A0E5A474BFB6
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16009231

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

673KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

389KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.3P+

Size

Virtual Size

12.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.)d<

Size

512B

Virtual Size

408B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.t;-

Size

20.1MB

Virtual Size

20.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

284B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

AryaMenu-Loader.zip

.config

loader.exe

kernel32

user32

advapi32

shell32

ole32

oleaut32

userenv

gdiplus

imm32

d3dcompiler_43

dwmapi

ntdll

setupapi

d3d11

bcrypt

secur32

iphlpapi

ws2_32

crypt32

generic