CRC32b
DeleteCDKeyFromRegistry
EAHash
IsSave
JDLZ_compress
JDLZ_decompress
MD5
ReadCDKeyFromRegistry
SaveFixChkSum
SaveIsChkSumValid
SaveRepair
WriteCDKeyToRegistry
Behavioral task
behavioral1
Sample
nfs_carbon_unlocker.zip
Resource
win10v2004-20240508-en
Target
nfs_carbon_unlocker.zip
Size
125KB
MD5
97f58dd58009fca70c9b987cb2bec95d
SHA1
57109ad3f067e0dabc25b1da830a52499bd35dae
SHA256
066ebb32c7b84f1e41469a11165e38bf90dce4e0a1c339dfa7158b1f8e959c14
SHA512
4d9faa1f6198fb58c7a20228b7171979d118575219a5b92ee5caa97fa9a6e4bed2361ca87b9ff8d035a1c07ed378df2688c55f07095b327266ba1021298a636f
SSDEEP
3072:6O8jw2zW7g4U2G6yYg4P6B+cucRMplBc1sCH7jihAwTWXRTe0JBQh+:TCIKraiB+9c1fbj6zSXQ0g+
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/Editor/NFSCSaveLib.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/Editor/NFSCSaveEditor.exe | upx |
static1/unpack001/Editor/NFSCSaveLib.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Editor/NFSCSaveEditor.exe |
unpack002/out.upx |
unpack001/Editor/NFSCSaveLib.dll |
unpack003/out.upx |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CRC32b
DeleteCDKeyFromRegistry
EAHash
IsSave
JDLZ_compress
JDLZ_decompress
MD5
ReadCDKeyFromRegistry
SaveFixChkSum
SaveIsChkSumValid
SaveRepair
WriteCDKeyToRegistry
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ