nfsu2_v1[.]2_us[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

nfsu2_v1.2_us.zip
Size

7.8MB
MD5

fa945effffe6fcf73267ec72e83383ed
SHA1

6b58aad59510a6063cb0c64a5c5abe0cdc84e88e
SHA256

3306cb5a7881b79b0a66853edf097baf66bb6324702ec9cac76a634ba55703dc
SHA512

bc8636f0a7d64c08332bda4e4ce56b541e5523e6a7ba4f88f160a19e76d1d604b9d72300a041b019a4460f7771734401735001087a2d44fd74df85e83a5a9546
SSDEEP

196608:A04pKfKTrN2xclh+1GRF6AY+/6lXazNT72vHYVzLvWb4u0:A00TDh+1RAXilwTNtvY/0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/nfsu2_v1.2_us.exe

Files

nfsu2_v1.2_us.zip
.zip
nfsu2_v1.2_us.exe
.exe windows:1 windows x86 arch:x86

81125b28eeb08e47c205027a6edf7a0a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameA
GetSystemDirectoryA
GetTempPathA
LoadResource
lstrlenA
FindResourceA
WriteFile
LockResource
CreateFileA
LoadLibraryA
CloseHandle
FreeResource
DeleteFileA
GetProcAddress
FreeLibrary
GetModuleFileNameA
GetModuleHandleA
GetWindowsDirectoryA
FlushFileBuffers
VirtualAlloc
VirtualFree
GetFileType
GetStdHandle
GetCPInfo
GetOEMCP
GetACP
UnhandledExceptionFilter
ExitProcess
GetLastError
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
SetFilePointer
GetVersion
GetCurrentProcess
GetCommandLineA
GetEnvironmentStrings
ReadFile
SetStdHandle
SetEndOfFile
GetStartupInfoA

user32

GetParent
GetSysColor
MoveWindow
PeekMessageA
LoadBitmapA
GetDesktopWindow
GetWindowRect
CreateDialogParamA
OemToCharA
SendMessageA
InvalidateRect
RegisterWindowMessageA
LoadIconA
LoadCursorA
RegisterClassA
DialogBoxParamA
CharToOemA
MessageBoxA
ExitWindowsEx
GetDC
CreateWindowExA
DrawEdge
DestroyWindow
GetMessageA
TranslateMessage
DispatchMessageA
DrawTextA
CheckDlgButton
GetDlgItemTextA
SetWindowTextA
wsprintfA
SetDlgItemTextA
EnableWindow
EndDialog
GetDlgItem
BeginPaint
EndPaint
PostQuitMessage
SetFocus
DefWindowProcA
GetClientRect
ShowWindow
UpdateWindow
IsDlgButtonChecked
ReleaseDC

gdi32

CreateSolidBrush
GetObjectA
DeleteDC
DPtoLP
StretchBlt
SetMapMode
BitBlt
SelectObject
CreateCompatibleDC
GetMapMode
SetBkMode
Rectangle
DeleteObject
CreateHatchBrush
GetStockObject

comdlg32

GetOpenFileNameA
CommDlgExtendedError

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 996KB - Virtual size: 995KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81125b28eeb08e47c205027a6edf7a0a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Sections

.text Size: 26KB - Virtual size: 25KB

.bss Size: - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 28B

.data Size: 7KB - Virtual size: 7KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 996KB - Virtual size: 995KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 26KB - Virtual size: 25KB

.bss
Size: - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 28B

.data
Size: 7KB - Virtual size: 7KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 996KB - Virtual size: 995KB

.reloc
Size: 3KB - Virtual size: 3KB