The Mod Menu exe File Malware Analysis

Technical Analysis

File Name	Mod Menu.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.229.174
Database Version	2025-12-01 01:00:37 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	a6cf2906b4c7bbd2e67ab55b7abd154a
SHA1	ac8a443dd6b37b87338199447f39a429cf618621
SHA256	955f5e00767609212d2efe69f7656728700e85323ebd582a3adbdb9289a078c4
SHA512	b08381736bf2fd36f3cb3d7f263e7b5549cf59187fab3a69956622b9769d83711e13346e28faa1d1b2dc6fb33e2903f42db09f26687fc702717e8968ec252126
ImpHash	c990338f8145dc29c6f38fb73cf05c77

PE Analysis

Basic Information

▼

Icon	Hash: 0053d073f76c706a7821de65fe15f89e Fuzzy: 1511a59156d29db861423fecfb6b240d dHash: f0cc925969bccef3
Image Base	`0x140000000`
Entry Point	`0x14000d0d0`
Compilation Time	2025-08-04 02:16:55
Checksum	0x00b74e88 (Actual: 0x00b74e88)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	5 libraries USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32
Exports	0 functions
Resources	3 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	174,144 bytes	174,592 bytes	6.48 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0B31E33FE5C337AB5001FD0E9827E967`
`.rdata`	`0x0002c000`	78,384 bytes	78,848 bytes	5.72 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`CC2D623F3A53922F638C40459F6AC47E`
`.data`	`0x00040000`	20,720 bytes	3,584 bytes	1.82 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`197F989242DC6660F50D74CF584E262C`
`.pdata`	`0x00046000`	8,892 bytes	9,216 bytes	5.34 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`3FAE02FA227E618EBD6D494E5835F23D`
`.fptable`	`0x00049000`	256 bytes	512 bytes	0.00 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`BF619EAC0CDF3F68D496EA9344137E8B`
`.rsrc`	`0x0004a000`	6,884 bytes	7,168 bytes	7.67 (Packed/Encrypted)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`1A38350A06AEAA6077E60C2BE5EFDC6D`
`.reloc`	`0x0004c000`	1,900 bytes	2,048 bytes	5.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`98C9699B10085BB8E0533706E3897132`

Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼

Total Resources: 3 (6,647 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	1	5,334 bytes	80.2%
RT_GROUP_ICON	1	20 bytes	0.3%
RT_MANIFEST	1	1,293 bytes	19.5%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The Mod Menu.exe File Analysis