Suspicious
Suspect

ba9a2e4a93627fa814f9bd6a6411b4c4

ZIP Archive
MD5: ba9a2e4a93627fa814f9bd6a6411b4c4
Size: 4.51 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ba9a2e4a93627fa814f9bd6a6411b4c4
Sha1 58095a183564588d46f90de0df699d45ca78aaf1
Sha256 b6bc6863350aaaec905b938754e39f08fdba7efef40e049e1f57a9f667395b7c
Sha384 d30250a0959ca058fee5f05a43501c1f55cc57c8debc2d9b7af398187830ea6112acacab6ef9613ef0ab79a1dbe72eee
Sha512 0ef70cc2f102d78a6016068513d4878c405b62aa728cbc807f21c20426977fee660e7623cc61d09c270ff687fd6fb8e4a03eecefca2263a70eba8b0ee9f0a087
SSDeep 98304:O7k8FmFQMv9Gy1A+QoGtg/jSnsGoCKgaKQW32J4tCIaUn+Zg:uDsFQM1PG+QoGtg6dXKg3sYFaUn+Zg
TLSH 8F26333C7A7971ACE216C2BA83BEB4288F8C4F41676293CDE69D77AC71FF550A110449
ba9a2e4a93627fa814f9bd6a6411b4c4
KiddonsModMenu
libwinpthread-1.dll
Overlay_45614783.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
KiddonsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
__MACOSX
KiddonsModMenu
._libwinpthread-1.dll
STICH beta

No STICH Path has been generated for this analysis yet.

5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 5
ba9a2e4a93627fa814f9bd6a6411b4c4
KiddonsModMenu
libwinpthread-1.dll
Overlay_45614783.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
KiddonsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
__MACOSX
KiddonsModMenu
._libwinpthread-1.dll
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙