NeedForSpeedUnderground2v1[.]0NoCDFixedexeEng-1[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

NeedForSpeedUnderground2v1.0NoCDFixedexeEng-1.rar
Size

1.9MB
MD5

d588eaaaf2d35be451a4bb7ae09f9136
SHA1

e75bbab8fbfececb59714be369ceabd12108d82e
SHA256

155883c6d6ea1d13bd3ac721c346146ddf416e5994ec2b503e4f8b1feca2db50
SHA512

f1a6de142f75a4847c50dcd5201f0586d20009b0551d037e54357b44154a7bbc4a603e648db26c08934bc6f60e488e9faa687c684ba589aa3fe2f025ae7c200b
SSDEEP

49152:JWmBGW5MikQNh4tk5DpGoJ1ye26PMke4zOmXXfk7PPxDYDb9:JW4KqNh4O51Rzye26N9XXsbFs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/speed2.exe

Files

NeedForSpeedUnderground2v1.0NoCDFixedexeEng-1.rar
.rar
reloaded.nfo
speed2.exe
.exe windows:4 windows x86 arch:x86

39d70623cd89378e2fa303ee76e5da72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

dinput8

DirectInput8Create

user32

PeekMessageA
GetCursorPos
wvsprintfA
MessageBoxA
GetSystemMetrics
DefWindowProcA
GetMessageA
DispatchMessageA
ShowCursor
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
AdjustWindowRect
GetDesktopWindow
CreateWindowExA
UpdateWindow
SetCursor
SetFocus
SetForegroundWindow
ShowWindow
SetWindowLongA
DestroyWindow
BeginPaint
EndPaint
PostMessageA
IsIconic
ReleaseCapture
SetCapture
GetClientRect
GetWindowRect
SetRect
UnregisterClassA
SetActiveWindow
GetForegroundWindow
wsprintfA
PostThreadMessageA
PostQuitMessage

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

gdi32

SetTextColor
CreateCompatibleDC
CreateFontA
CreateBitmap
SetBkMode
DeleteDC
ExtTextOutA
SetBkColor
GetPixel
DeleteObject
SelectObject
BitBlt

shfolder

SHGetFolderPathA

shell32

ShellExecuteA

ws2_32

WSAGetLastError
WSAStartup
setsockopt
ioctlsocket
socket
closesocket
shutdown
connect
listen
accept
sendto
send
recvfrom
recv
select
getpeername
getsockname
gethostbyname
WSAIoctl
WSACleanup
bind

kernel32

VirtualQuery
IsBadCodePtr
GetCurrentProcessId
SetEndOfFile
SetStdHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsDebuggerPresent
DebugBreak
GetLocaleInfoW
GetTickCount
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetACP
HeapSize
HeapReAlloc
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
TlsFree
GetStartupInfoA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
IsBadReadPtr
GetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
GetLongPathNameA
SetErrorMode
CloseHandle
Process32Next
Process32First
Sleep
CreateToolhelp32Snapshot
SuspendThread
ResumeThread
GetDriveTypeA
GetLogicalDrives
GetVersionExA
OutputDebugStringA
SetProcessAffinityMask
SetThreadPriority
SetPriorityClass
GetProcessAffinityMask
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetSystemInfo
IsProcessorFeaturePresent
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
CreateFileW
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
VirtualFree
VirtualAlloc
lstrcmpiA
DuplicateHandle
GetCurrentThreadId
TerminateThread
SleepEx
GetExitCodeThread
CreateEventA
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentDirectoryA
WriteFile
SetFilePointer
DeleteFileA
MoveFileA
ReadFile
GetDiskFreeSpaceExA
GlobalAlloc
GlobalFree
VirtualProtect
CreateThread
CreateMutexA
ReleaseMutex
HeapFree
GetProcessHeap
HeapAlloc
WaitCommEvent
GetOverlappedResult
SetCommMask
WaitForMultipleObjects
PurgeComm
SetCommState
GetCommState
SetCommConfig
GetCommConfig
SetCommTimeouts
SetupComm
GetCommandLineA
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTimeAsFileTime
RaiseException
ExitThread
TlsSetValue
TlsGetValue
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetFileType
RemoveDirectoryA
GetStdHandle

dsound

ord1

ddraw

DirectDrawCreate

winmm

timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod

tapi32

lineAnswer
lineMakeCall
lineGetID
lineClose
lineNegotiateAPIVersion
lineOpen
lineGetDevCaps
lineInitialize
lineShutdown

netapi32

Netbios

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 845KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 228KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 236KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39d70623cd89378e2fa303ee76e5da72

Headers

File Characteristics

Imports

d3d9

dinput8

user32

advapi32

gdi32

shfolder

shell32

ws2_32

kernel32

dsound

ddraw

winmm

tapi32

netapi32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 404KB - Virtual size: 400KB

.data Size: 212KB - Virtual size: 845KB

.rsrc Size: 228KB - Virtual size: 225KB

Size: 236KB - Virtual size: 234KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 404KB - Virtual size: 400KB

.data
Size: 212KB - Virtual size: 845KB

.rsrc
Size: 228KB - Virtual size: 225KB