NeedForSpeedUnbound[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NeedForSpeedUnbound.exe
Size

447.0MB
MD5

1f7a7715fbe920102b940e845503760e
SHA1

547d26aa99d12d8f78b0dca868efb6012a5990e8
SHA256

11a28ba379c051b1a8d5ff63efdeb6a636c1cabfda80028854300bf9d7870c60
SHA512

896488362da8cdd38dc1bf7fa052e7195c22afb1d7482f12f826a9380d6d60e55b8a7b8069bb9e5e21f0bf9a6d606451a064fd93b4205d532cc27ba092886431
SSDEEP

6291456:QwrjAorczu5gSX1u/7jbnyQskJnQCyvaoz+cW2GOLr2eYMkfdIQ7hd1Mc7gLUnI3:Qwndrr5gSlVuQ7NW25r2eA5erAnuc4

Score

N/A

Malware Config

Signatures

Files

NeedForSpeedUnbound.exe
.exe windows x64

f11b57f609cb8bb66419529fd2f979d2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:d1:b8:a4:92:af:a9:a6:ec:80:3a:56:32:ce:7d:86
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

01/03/2022, 00:00

Not After

01/03/2023, 23:59

Subject

CN=Electronic Arts\, Inc.,OU=Criterion,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ad:99:5d:6e:a9:03:8a:8b:e6:87:68:de:ed:14:d0:ae:ef:3e:7d:b3
Signer

Actual PE Digest

ad:99:5d:6e:a9:03:8a:8b:e6:87:68:de:ed:14:d0:ae:ef:3e:7d:b3

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Electronic Arts\, Inc.,OU=Criterion,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US

16/11/2022, 21:09
Valid: true

Chain 1

CN=Electronic Arts\, Inc.,OU=Criterion,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

core/activation64

ord100
ord101

Exports

Exports

?isGlimpseEnabled@@YA_NXZ
?m_permLUT@PerlinHash@math@fb@@0QBEB
AmdPowerXpressRequestHighPerformance
D3D12SDKPath
D3D12SDKVersion
GetDenuvoTicketLocation
GetDenuvoTimeTicketRequest
IsGameRuntime
NvOptimusEnablement
ffxFsr2ContextCreate
ffxFsr2ContextDestroy
ffxFsr2ContextDispatch
ffxFsr2ContextGenerateReactiveMask
ffxFsr2GetInterfaceDX12
ffxFsr2GetJitterOffset
ffxFsr2GetJitterPhaseCount
ffxFsr2GetRenderResolutionFromQualityMode
ffxFsr2GetScratchMemorySizeDX12
ffxFsr2GetUpscaleRatioFromQualityMode
ffxFsr2ResourceIsNull
ffxGetCommandListDX12
ffxGetDX12ResourcePtr
ffxGetDeviceDX12
ffxGetResourceDX12

Sections

.00cfg
Size: 51.2MB - Virtual size: 51.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.xcode
Size: 7.7MB - Virtual size: 7.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11.7MB - Virtual size: 11.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.srdata
Size: 2.1MB - Virtual size: 12.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls$
Size: 512B - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ecode
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 242KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.trace
Size: 512B - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.sxdata
Size: 365.4MB - Virtual size: 365.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_MEM_READ

.edata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.arch
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.didata
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xtls
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ooa
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f11b57f609cb8bb66419529fd2f979d2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:d1:b8:a4:92:af:a9:a6:ec:80:3a:56:32:ce:7d:86Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

ad:99:5d:6e:a9:03:8a:8b:e6:87:68:de:ed:14:d0:ae:ef:3e:7d:b3Signer

Signature Validations

Verification

16/11/2022, 21:09 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

core/activation64

Exports

Exports

Sections

.00cfg Size: 51.2MB - Virtual size: 51.2MB

.xcode Size: 7.7MB - Virtual size: 7.7MB

.reloc Size: 11.7MB - Virtual size: 11.8MB

.srdata Size: 2.1MB - Virtual size: 12.2MB

.tls$ Size: 512B - Virtual size: 3.7MB

.debug Size: 3.2MB - Virtual size: 3.2MB

.sdata Size: 1.2MB - Virtual size: 1.2MB

.text1 Size: 176KB - Virtual size: 176KB

.ecode Size: 3KB - Virtual size: 4KB

.xdata Size: 242KB - Virtual size: 244KB

.trace Size: 512B - Virtual size: 1.1MB

.sxdata Size: 365.4MB - Virtual size: 365.4MB

.data2 Size: 232KB - Virtual size: 232KB

.edata Size: 11KB - Virtual size: 10KB

.arch Size: 512B - Virtual size: 9B

.data1 Size: 512B - Virtual size: 9B

.didata Size: 512B - Virtual size: 97B

.xtls Size: 16KB - Virtual size: 16KB

.code Size: 30KB - Virtual size: 30KB

.text Size: 3.7MB - Virtual size: 3.7MB

.ooa Size: 2KB - Virtual size: 1KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:d1:b8:a4:92:af:a9:a6:ec:80:3a:56:32:ce:7d:86
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

ad:99:5d:6e:a9:03:8a:8b:e6:87:68:de:ed:14:d0:ae:ef:3e:7d:b3
Signer

16/11/2022, 21:09
Valid: true

.00cfg
Size: 51.2MB - Virtual size: 51.2MB

.xcode
Size: 7.7MB - Virtual size: 7.7MB

.reloc
Size: 11.7MB - Virtual size: 11.8MB

.srdata
Size: 2.1MB - Virtual size: 12.2MB

.tls$
Size: 512B - Virtual size: 3.7MB

.debug
Size: 3.2MB - Virtual size: 3.2MB

.sdata
Size: 1.2MB - Virtual size: 1.2MB

.text1
Size: 176KB - Virtual size: 176KB

.ecode
Size: 3KB - Virtual size: 4KB

.xdata
Size: 242KB - Virtual size: 244KB

.trace
Size: 512B - Virtual size: 1.1MB

.sxdata
Size: 365.4MB - Virtual size: 365.4MB

.data2
Size: 232KB - Virtual size: 232KB

.edata
Size: 11KB - Virtual size: 10KB

.arch
Size: 512B - Virtual size: 9B

.data1
Size: 512B - Virtual size: 9B

.didata
Size: 512B - Virtual size: 97B

.xtls
Size: 16KB - Virtual size: 16KB

.code
Size: 30KB - Virtual size: 30KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.ooa
Size: 2KB - Virtual size: 1KB