Static task
static1
Behavioral task
behavioral1
Sample
NFS - MW Black Edition 1.3 Trainer.exe
Resource
win7-20231215-de
Behavioral task
behavioral2
Sample
NFS - MW Black Edition 1.3 Trainer.exe
Resource
win10v2004-20231215-de
General
-
Target
NFS - MW Black Edition 1.3 Trainer.exe
-
Size
30KB
-
MD5
854fc2d0529be8bd5b3fde1c082ddd6f
-
SHA1
35d57f32ee2a64ff28d620cf2292bcf5412a4bfc
-
SHA256
cdef788506597ae82a79f9edbf3f45b6df43efaaffaab769a5be17444d714977
-
SHA512
df384232b30e057451393816f0d06b6149d962c69a94d01458b4f1c80a4f41fb2aca34c09c0e87cf0f62ee4de3b44b35bbe19f9ac46b7068f2938bed66694a60
-
SSDEEP
768:6QKa4qKD+8iVQ5ggLW2u4rCvk3z2cZGkakAs:6QwPD+8ct2W2LCsPnL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NFS - MW Black Edition 1.3 Trainer.exe
Files
-
NFS - MW Black Edition 1.3 Trainer.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 48KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE