CRC32b
DeleteCDKeyFromRegistry
EAHash
IsSave
JDLZ_compress
JDLZ_decompress
MD5
ReadCDKeyFromRegistry
SaveFixChkSum
SaveIsChkSumValid
SaveRepair
WriteCDKeyToRegistry
Overview
overview
7Static
static
7ARazor/ARazor
windows7-x64
1ARazor/ARazor
windows10-2004-x64
1Editor/ChangeLog.txt
windows7-x64
1Editor/ChangeLog.txt
windows10-2004-x64
1Editor/NFS...or.exe
windows7-x64
7Editor/NFS...or.exe
windows10-2004-x64
7out.exe
windows7-x64
1out.exe
windows10-2004-x64
3Editor/NFS...ib.dll
windows7-x64
7Editor/NFS...ib.dll
windows10-2004-x64
7out.dll
windows7-x64
1out.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
ARazor/ARazor
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ARazor/ARazor
Resource
win10v2004-20240419-en
Behavioral task
behavioral3
Sample
Editor/ChangeLog.txt
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Editor/ChangeLog.txt
Resource
win10v2004-20240419-en
Behavioral task
behavioral5
Sample
Editor/NFSCSaveEditor.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
Editor/NFSCSaveEditor.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
out.exe
Resource
win7-20231129-en
Behavioral task
behavioral8
Sample
out.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral9
Sample
Editor/NFSCSaveLib.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
Editor/NFSCSaveLib.dll
Resource
win10v2004-20240419-en
Behavioral task
behavioral11
Sample
out.dll
Resource
win7-20240220-en
Behavioral task
behavioral12
Sample
out.dll
Resource
win10v2004-20240419-en
Target
nfs_carbon_unlocker.zip
Size
125KB
MD5
97f58dd58009fca70c9b987cb2bec95d
SHA1
57109ad3f067e0dabc25b1da830a52499bd35dae
SHA256
066ebb32c7b84f1e41469a11165e38bf90dce4e0a1c339dfa7158b1f8e959c14
SHA512
4d9faa1f6198fb58c7a20228b7171979d118575219a5b92ee5caa97fa9a6e4bed2361ca87b9ff8d035a1c07ed378df2688c55f07095b327266ba1021298a636f
SSDEEP
3072:6O8jw2zW7g4U2G6yYg4P6B+cucRMplBc1sCH7jihAwTWXRTe0JBQh+:TCIKraiB+9c1fbj6zSXQ0g+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/Editor/NFSCSaveLib.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/Editor/NFSCSaveEditor.exe | upx |
static1/unpack001/Editor/NFSCSaveLib.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Editor/NFSCSaveEditor.exe |
unpack002/out.upx |
unpack001/Editor/NFSCSaveLib.dll |
unpack003/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CRC32b
DeleteCDKeyFromRegistry
EAHash
IsSave
JDLZ_compress
JDLZ_decompress
MD5
ReadCDKeyFromRegistry
SaveFixChkSum
SaveIsChkSumValid
SaveRepair
WriteCDKeyToRegistry
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ