Fortnite CFFHOOK by Spyro[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Fortnite CFFHOOK by Spyro.exe
Size

1.8MB
MD5

bc9b1b368097805254280adc0ebab47e
SHA1

d74790b312152fbc6d74f004bef26227c2f1e6aa
SHA256

3c301ea2f7c6113f5a27f95f694e84c2506aa18ff533ce1583263abace106266
SHA512

42182971c99e02a081daaece870984bdd9bc3b902cbb4c99c393fc1240bfffa99a61964dc371c227e13705b1cb52be087fced0f157c8960d8e871f8f9f11dfaf
SSDEEP

24576:9dQLqN28WYExn5TJ0GCrIUcrzET0eX2k3cO9rBAlIiiGGhVsvjwXy77dkVzzZW2I:oLqN28WPUEdHyX2kkNJd52q18h3BFw

Score

N/A

Malware Config

Signatures

Files

Fortnite CFFHOOK by Spyro.exe
.exe windows x86

5a498eee87e4d89512a84502f500181f

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2013 12:00

Not After

22-10-2028 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:48:8a:d7:e4:ba:ba:7f:93:e3:32:3c:05:73:bf:3c
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

24-04-2020 00:00

Not After

24-08-2022 12:00

Subject

CN=Brave Software\, Inc.,OU=Brave Software,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29-03-2022 00:00

Not After

14-03-2033 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

66:7d:a6:5a:07:1b:67:9d:15:ca:43:cb:e2:53:49:95:73:e9:cc:82:f6:02:7b:b6:28:8a:c9:9f:6d:dc:cb:2e
Signer

Actual PE Digest

66:7d:a6:5a:07:1b:67:9d:15:ca:43:cb:e2:53:49:95:73:e9:cc:82:f6:02:7b:b6:28:8a:c9:9f:6d:dc:cb:2e

Digest Algorithm

sha256

PE Digest Matches

false

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Brave Software\, Inc.,OU=Brave Software,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

30-03-2022 05:58
Valid: true

Chain 1

CN=Brave Software\, Inc.,OU=Brave Software,O=Brave Software\, Inc.,L=San Francisco,ST=California,C=US

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

5WqI
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uSvf
Size: 940KB - Virtual size: 940KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

wpfN
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AvDf
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Oatj
Size: 540KB - Virtual size: 539KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

JTj9
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

loT5
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CBAFyq
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a498eee87e4d89512a84502f500181f

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08Certificate

Extended Key Usages

Key Usages

05:48:8a:d7:e4:ba:ba:7f:93:e3:32:3c:05:73:bf:3cCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

66:7d:a6:5a:07:1b:67:9d:15:ca:43:cb:e2:53:49:95:73:e9:cc:82:f6:02:7b:b6:28:8a:c9:9f:6d:dc:cb:2eSigner

Signature Validations

Verification

30-03-2022 05:58 Valid: true

Chain 1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

5WqI Size: 146KB - Virtual size: 145KB

uSvf Size: 940KB - Virtual size: 940KB

wpfN Size: 125KB - Virtual size: 125KB

AvDf Size: 4KB - Virtual size: 7KB

Oatj Size: 540KB - Virtual size: 539KB

JTj9 Size: 12KB - Virtual size: 11KB

loT5 Size: 3KB - Virtual size: 3KB

CBAFyq Size: 14KB - Virtual size: 16KB

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

05:48:8a:d7:e4:ba:ba:7f:93:e3:32:3c:05:73:bf:3c
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

66:7d:a6:5a:07:1b:67:9d:15:ca:43:cb:e2:53:49:95:73:e9:cc:82:f6:02:7b:b6:28:8a:c9:9f:6d:dc:cb:2e
Signer

30-03-2022 05:58
Valid: true

5WqI
Size: 146KB - Virtual size: 145KB

uSvf
Size: 940KB - Virtual size: 940KB

wpfN
Size: 125KB - Virtual size: 125KB

AvDf
Size: 4KB - Virtual size: 7KB

Oatj
Size: 540KB - Virtual size: 539KB

JTj9
Size: 12KB - Virtual size: 11KB

loT5
Size: 3KB - Virtual size: 3KB

CBAFyq
Size: 14KB - Virtual size: 16KB