Malicious
Malicious

5afde53a33a853c83b6b1cf3fa9a8690

ZIP Archive
MD5: 5afde53a33a853c83b6b1cf3fa9a8690
Size: 6.41 MB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5afde53a33a853c83b6b1cf3fa9a8690
Sha1 d067a94396be4acb3244773bbb440e4e6bf15d8a
Sha256 757beb610410f58fb83577fba8dc8721d1d17bff5173d9b6a00bbe4a2092ca1a
Sha384 2ad3bff79b47226ab954855e81d43bb397e5c65acc9f18234bfaefd451a672ea333be5436b2bb03689dc61f27390fbf2
Sha512 c13b59967d0052198ca0aabc8f4fcc77349fc301c69457df82aec9f42167352e4122a2680d75ddb81664c8e29bd4d9343bfd5276c4abb2b8e3531ee7467ae204
SSDeep 196608:1N5FAcc5JUlXz9xwMVWOGrvlFt0WzGKws:H5FAfUds3LLTGNs
TLSH 69563391CC30A3DDDE4DAE74927EF2684259BC164C8F23363444B69AD4F7D879A02A3D
5afde53a33a853c83b6b1cf3fa9a8690
Malicious
AmongUsModMenu
Malicious
AmongUsModMenu
Malicious
AmongUsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
libwinpthread-1.dll
Overlay_45614783.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
locale_data
cs
alert_messages.json
hint_lines.json
panel_strings.json
popup_text.json
da
feedback_lines.json
labels_ui.json
menu_entries.json
popup_text.json
el
alert_messages.json
captions.json
feedback_lines.json
menu_entries.json
popup_text.json
en
feedback_lines.json
panel_strings.json
popup_text.json
es
alert_messages.json
feedback_lines.json
labels_ui.json
fi
alert_messages.json
feedback_lines.json
popup_text.json
fr
hint_lines.json
menu_entries.json
panel_strings.json
it
alert_messages.json
labels_ui.json
menu_entries.json
panel_strings.json
ja
alert_messages.json
captions.json
hint_lines.json
labels_ui.json
panel_strings.json
ko
alert_messages.json
captions.json
panel_strings.json
pl
alert_messages.json
feedback_lines.json
labels_ui.json
pt
alert_messages.json
feedback_lines.json
hint_lines.json
labels_ui.json
sv
feedback_lines.json
hint_lines.json
panel_strings.json
modules
Malicious
assets
feedback_table.csv
LauncherState.json
loadout_defaults_2025.ini
THEME_SETTINGS.ini
manuals
browser_config_v8.ini
guide.txt
manifest_blob_513.dat
README_v9.md
season_meta_library.json
user_options.json
patches
AUDIO_OPTIONS.ini
CONFIG.json
launcher_settings.ini
library_options_active.ini
pack_blob.dat
pack_outline.xml
preset_defaults.ini
preset_index.csv
rating_data_dat_2023.dat
thumbnail_render_enabled.log
troubleshooting_notes.txt
presets
background_task_v9.log
config-panel.json
FEEDBACK_TABLE.csv
FlintFoundry
changelog_xml.xml
LICENSE_NOTES.txt
manifest.json
pack_outline_queued.xml
wallpaper-kit.bmp
manifest_blob_v8.dat
manual-builder.txt
pearl-works
launcher_state.json
LICENSE_NOTES.txt
manifest.json
README.md
thumbnail_cache_dat.dat
PRESET_APPLY.log
thumbnails_lib
Malicious
Advanced.md
browse_cache_dat.dat
card-edition.bmp
frame.bmp
PresetGuide.txt
preset_data.json
SEASON_META.json
splash-mission.bmp
splash_433.bmp
theme_info_2025.json
tile_card.bmp
Malicious
trophy-list-banner.json
TrophyDataDat.dat
Wallpaper.bmp
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
5 / 5
Path arc:zip>pe:dll>pe:rsrc>bin
Shape arc:zip>pe:dll>pe:rsrc>bin
malicious 4 nodes
Path arc:zip>pe:exe>pe:rsrc>bin
Shape arc:zip>pe:exe>pe:rsrc>bin
malicious 4 nodes
5afde53a33a853c83b6b1cf3fa9a8690
Malicious
AmongUsModMenu
Malicious
AmongUsModMenu
Malicious
AmongUsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
libwinpthread-1.dll
Overlay_45614783.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
locale_data
cs
alert_messages.json
hint_lines.json
panel_strings.json
popup_text.json
da
feedback_lines.json
labels_ui.json
menu_entries.json
popup_text.json
el
alert_messages.json
captions.json
feedback_lines.json
menu_entries.json
popup_text.json
en
feedback_lines.json
panel_strings.json
popup_text.json
es
alert_messages.json
feedback_lines.json
labels_ui.json
fi
alert_messages.json
feedback_lines.json
popup_text.json
fr
hint_lines.json
menu_entries.json
panel_strings.json
it
alert_messages.json
labels_ui.json
menu_entries.json
panel_strings.json
ja
alert_messages.json
captions.json
hint_lines.json
labels_ui.json
panel_strings.json
ko
alert_messages.json
captions.json
panel_strings.json
pl
alert_messages.json
feedback_lines.json
labels_ui.json
pt
alert_messages.json
feedback_lines.json
hint_lines.json
labels_ui.json
sv
feedback_lines.json
hint_lines.json
panel_strings.json
modules
Malicious
assets
feedback_table.csv
LauncherState.json
loadout_defaults_2025.ini
THEME_SETTINGS.ini
manuals
browser_config_v8.ini
guide.txt
manifest_blob_513.dat
README_v9.md
season_meta_library.json
user_options.json
patches
AUDIO_OPTIONS.ini
CONFIG.json
launcher_settings.ini
library_options_active.ini
pack_blob.dat
pack_outline.xml
preset_defaults.ini
preset_index.csv
rating_data_dat_2023.dat
thumbnail_render_enabled.log
troubleshooting_notes.txt
presets
background_task_v9.log
config-panel.json
FEEDBACK_TABLE.csv
FlintFoundry
changelog_xml.xml
LICENSE_NOTES.txt
manifest.json
pack_outline_queued.xml
wallpaper-kit.bmp
manifest_blob_v8.dat
manual-builder.txt
pearl-works
launcher_state.json
LICENSE_NOTES.txt
manifest.json
README.md
thumbnail_cache_dat.dat
PRESET_APPLY.log
thumbnails_lib
Malicious
Advanced.md
browse_cache_dat.dat
card-edition.bmp
frame.bmp
PresetGuide.txt
preset_data.json
SEASON_META.json
splash-mission.bmp
splash_433.bmp
theme_info_2025.json
tile_card.bmp
Malicious
trophy-list-banner.json
TrophyDataDat.dat
Wallpaper.bmp
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙