RZ�2�B_�<u`'X���>�� �@H�r�T�j�ȃ8����KA���,���Ѭ�_���]6��FfF�}��(�=�DrR#���7V4}��8^��d:^�B�dp��ǣ�1L��}�'���1a��e���:sGh*��G�J,(��;����O���y ڔ�*Atck�[ �[�����^��e��}�� �S�|VΚ["Z�����]8 ��\�����(�ݫ��Q����S\3�u�������'�8H#hY��k��伋S~A�1[S~����[��kMo���믎`���w��Hi�u���J;����?� ��nY��I��k�.��ä�[���� �~�50�� ��a��V�r�P$Vi�J����8�����}y���c�q�(ˀw�l\VhP�:z�;ck5�ȶ�ש��G)���T��;�fC+��,[1k�4I�l��(��(�����w��`nT$['v�X �&$@&[�� �[��g���m���$"�t�:X�n�Pe��,3�3=!��ӳ��1^խ��a��-/A��D����o���\J%���Տ�� �*H�\>S�%��I��'R0�B�u��Łף\b4�Z���:�G66�tQR�N�,�@�(s�⬛�� �ʛ|X��jG�}{��B��H�č��$�k��F��bh�L�: ����#�)2����C����>n&.�����f���<p�h�e\�ב��i˯��w3����\l� gM��n���q�i�tZ�)˕� �h[��`�}{H���`qV�3�ޜl. Kv/w���'Be�Z]��3\0�3��阏�p>�À�)�-M�#`���X������3��Ǜ�`;��3Xt;�G&�%���ޱ�ctŠ�a6��ǒJT|ⲗ����)�#!����S��w�jQ��RtO����壞��p���cm�&�E�D,��<�+��@8ݡ����m�����@(�C]ˮ���]�>��T�F&o�="��e5w�����O ��@��b�q����k�4N нf����� A<�yL���=��s�x�-�k���Tb����BRd>�0`V�.+=�!��{$3�3��W�B����[65��S��,4k^ߊ�UF�(�d�.���7";M���ө�۸ox[�&�e�gZg�V��� gr�FI�� Lq��QKI>�=!�'���qoz�/#F�ߨ�x�4����؇Q�c���t�>��5#W����e��n. �a�j�{:ɤ��s���9���=Lx�UֺK�n��L�Q&랾�7������a~tɅ�1#�,N���R?.�CV��̤��:�6� Qq����<Q�hR�v{��y����T��fִ�6���3�y��pԏ�z������<U Ȑ'l@�� 4�C��/E@����d}����_���-�67�v f~���,V�>�m�jAÇ����_7\������;>�KfQ+�V�8:�`>�����h6 �މ�ϙ �])��p�*"���f��9t�(��� `aNZ�ԟS~n�l�D �σ����V��oB�u �`9 �w��fճ�rԴ�t\ ��p����B�1x��`�O3��c2���3����O�Mxg�,76�X_�R��<��V�U�+�h�9��4���hp~X�pq�m����0���/�6n۾�\���#�p����a,�����ǘ�/�Y��I��9D2�E-���(ee�G���ƆF��CC���$���pm�4l?qĐ��eaH��/������pX�CV*b;�بx��[� 8ٹ�q�2E�hЩ;��È2�F��8�j g���amb��-�Bwֺ^R>7�����_�����*�fv�Eu `@ܿ�!�:������w��������KlT%C�^4���}�k�b��&~��0�R��X.�[\P�`�V����Dę��[��di���"�"�g3~�!�|M��!z�̈́��h:� �����yI��2XA�љ#��i��u����.\�h���Q�� M�rw�6�ⓨ�ӹ�� \�16I�F5�� ��Ŏ�n��*�����VX� �Ǖ�'�go+�\O�L�˘8�=R��0j#3�� PDMg��a$]�pT�E� .4���OE��˒���F6>���*_B� �)X<��JV��Jvrߎ�L����Z!䱖�D�-ԟi�����^��n?��$���'"����ؙ�+��7�R� ����<�R,s���_�gI1e2�2�'�����x�.�*Bj��ִ�;v]��J�@��jSumz˰��}T��d\�DJ��������Dg���J�gW�g�c�Y�` ^$�c���% ��ASn��8@�{L�o�N���u]wӢ�k5�.��D^d�C ���FX&2���I�I8fT]�')��/���l>-m22h�Q��<�����>z"���;pN�����l�d�j�N�Q=�������>�H<�¸0�`�j7 E����x�U�J�[��P3�2 (�m���|D"�-@#�j�&�B�d@��c� p�û��mG�B�lJ���Qw�w�ωT��*����h��8�q����V���G8�*uDʁ�6���0���:��f��!%R:���3Y��=�j��^�;�S�����t�",ċ�7���W����P��\M��@)?�5�uN2�;��?4h&�P�Z��#-5}=6օt��f_�_�M�\f-��P53�L]GNa�Vg��3�����Q����-��(m���{9]���Y���?)�%�2mE9'�|��#�p�g��+w��b��9�Ya!-��lWr�Q�Pur� ���(�v��x�y�H ������!��b�90 *��Q��`��N���GY��M��G�a����:樍����������g���M��Z�����_3 P�����Q���V2]D���.����k��ڌ).�r��o��b��w&}��!��N� � �p�;ȟ�|�i�"�� '�=��4�؊�e��z��<�i"܆W�/~G-���ۮ�� PN4.t,Q��.~�8h�{�t�YHX-
Static task
static1
General
-
Target
Fortnite Hack.zip
-
Size
7.3MB
-
MD5
032e59b78b5e734fe745462b77398ca0
-
SHA1
9fca9498cd0f55d9ad6346462de1c47e03bc623f
-
SHA256
717c41b72ceeeccc1264c5527e70704187d37fd49d1253769b23da0afd29b2c5
-
SHA512
a0cff723e55311371c3db2924b76b3769db634649f3cd3da2d82ebb9b8f00d034185e58c73aaaee8ef4a51a627aad42d28f1bab06b9c5a0d01cb147799e89c12
-
SSDEEP
196608:lxFFFkzF+uSh3cBRedv4eNe3X6lt04cSII9c:l3FFksuS5cvsgBH6lSvI9c
Malware Config
Signatures
Files
-
Fortnite Hack.zip.zip
Password: cheat
-
Fortnite Hack/Fortnite Hack.exe.exe windows x86
Password: cheat
8f1a9288bae20d24c92d3d27d642d92e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
LoadLibraryA
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
DecodePointer
GetCommandLineA
RaiseException
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringW
GetStringTypeW
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapSize
WriteFile
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
HeapReAlloc
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CharUpperBuffW
Exports
Exports
Sections
.text Size: - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
._WM Size: - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
. Se Size: 1024B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.)xk Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Fortnite Hack/menu.dll.ini.dll windows x86
Password: cheat
a8173563daecffff8a0dc6089d5fe9ef
Code Sign
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2013, 12:00Not After15/01/2038, 12:00SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29/03/2022, 00:00Not After14/03/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before07/10/2021, 00:00Not After09/10/2024, 23:59SubjectCN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
e6:60:28:53:c1:79:b5:fb:d9:5e:f0:8f:0c:4f:9c:c5:c2:ba:f5:41:3e:cd:5a:e4:d9:f3:18:29:b6:af:a2:2bSigner
Actual PE Digeste6:60:28:53:c1:79:b5:fb:d9:5e:f0:8f:0c:4f:9c:c5:c2:ba:f5:41:3e:cd:5a:e4:d9:f3:18:29:b6:af:a2:2bDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateCN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US07/06/2022, 03:20 Valid: true
Chain 1
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
CommandLineToArgvW
ShellExecuteW
kernel32
DeleteCriticalSection
GetExitCodeProcess
OpenProcess
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
FindClose
DeviceIoControl
GetLastError
VerSetConditionMask
CreateDirectoryW
CreateFileA
DeleteFileW
GetFullPathNameW
WriteFile
SetLastError
Sleep
GetCurrentProcess
GetCurrentProcessId
InitializeCriticalSection
GetVersionExA
LoadLibraryA
GlobalAlloc
GlobalUnlock
GlobalLock
LocalFree
MoveFileExW
VerifyVersionInfoW
SetEnvironmentVariableW
CloseHandle
WriteConsoleW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
DecodePointer
HeapReAlloc
GetTimeZoneInformation
SetStdHandle
GetFileAttributesW
GetCurrentDirectoryW
GetCommandLineW
GetCommandLineA
FreeLibrary
GetEnvironmentVariableA
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetSystemInfo
GetProcessAffinityMask
DebugBreak
GetProcessHeaps
SetUnhandledExceptionFilter
SetProcessAffinityMask
LCMapStringW
CompareStringW
GetConsoleOutputCP
HeapAlloc
GetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleMode
LocalAlloc
SetThreadAffinityMask
HeapFree
ExitProcess
HeapValidate
HeapSize
TlsFree
TlsSetValue
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
VirtualQuery
EncodePointer
InterlockedFlushSList
RtlUnwind
InitializeSListHead
TlsGetValue
GetStartupInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
TlsAlloc
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceA
GetDriveTypeW
GetFileInformationByHandle
GetFileSizeEx
ReadFile
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
GetTempPathW
SleepEx
GetSystemTimeAsFileTime
GetTempPathA
RaiseException
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
HeapSetInformation
HeapLock
HeapUnlock
HeapWalk
HeapQueryInformation
TerminateProcess
GlobalMemoryStatusEx
VirtualAlloc
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThread
OpenThread
TerminateThread
GetExitCodeThread
user32
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamA
SetWindowPos
wsprintfA
IsWindowVisible
GetWindowRect
EnumWindows
GetWindowThreadProcessId
OpenClipboard
GetDesktopWindow
MessageBoxA
GetWindowTextLengthA
EmptyClipboard
SetClipboardData
CloseClipboard
SetDlgItemTextA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
oleaut32
VariantClear
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
ws2_32
htonl
htons
ntohl
ntohs
send
freeaddrinfo
closesocket
connect
recv
socket
__WSAFDIsSet
bind
recvfrom
select
sendto
getaddrinfo
Exports
Exports
SteamAbortCall
SteamAbortOngoingUserIDTicketValidation
SteamAckSubscriptionReceipt
SteamBlockingCall
SteamChangeAccountName
SteamChangeEmailAddress
SteamChangeForgottenPassword
SteamChangeOfflineStatus
SteamChangePassword
SteamChangePersonalQA
SteamCheckAppOwnership
SteamCleanup
SteamClearError
SteamCloseFile
SteamCreateAccount
SteamCreateCachePreloaders
SteamCreateLogContext
SteamDefragCaches
SteamDeleteAccount
SteamEnumerateApp
SteamEnumerateAppDependency
SteamEnumerateAppIcon
SteamEnumerateAppLaunchOption
SteamEnumerateAppVersion
SteamEnumerateSubscription
SteamEnumerateSubscriptionDiscount
SteamEnumerateSubscriptionDiscountQualifier
SteamFindApp
SteamFindClose
SteamFindFirst
SteamFindFirst64
SteamFindNext
SteamFindNext64
SteamFindServersGetErrorString
SteamFindServersIterateServer
SteamFindServersNumServers
SteamFlushCache
SteamFlushFile
SteamForceCellId
SteamForgetAllHints
SteamGenerateSuggestedAccountNames
SteamGetAccountStatus
SteamGetAppCacheSize
SteamGetAppDLCStatus
SteamGetAppDependencies
SteamGetAppDir
SteamGetAppIds
SteamGetAppPurchaseCountry
SteamGetAppStats
SteamGetAppUpdateStats
SteamGetAppUserDefinedInfo
SteamGetAppUserDefinedRecord
SteamGetCacheDecryptionKey
SteamGetCacheDefaultDirectory
SteamGetCacheFilePath
SteamGetCachePercentFragmentation
SteamGetContentServerInfo
SteamGetCurrentAppId
SteamGetCurrentCellID
SteamGetCurrentEmailAddress
SteamGetDepotParent
SteamGetEncryptedUserIDTicket
SteamGetEncryptionKeyToSendToNewClient
SteamGetFileAttributeFlags
SteamGetLocalClientVersion
SteamGetLocalFileCopy
SteamGetNumAccountsWithEmailAddress
SteamGetOfflineStatus
SteamGetSponsorUrl
SteamGetSubscriptionExtendedInfo
SteamGetSubscriptionIds
SteamGetSubscriptionPurchaseCountry
SteamGetSubscriptionReceipt
SteamGetSubscriptionStats
SteamGetTotalUpdateStats
SteamGetUser
SteamGetUserType
SteamGetVersion
SteamGetc
SteamHintResourceNeed
SteamInitializeUserIDTicketValidator
SteamInsertAppDependency
SteamIsAccountNameInUse
SteamIsAppSubscribed
SteamIsCacheLoadingEnabled
SteamIsFileImmediatelyAvailable
SteamIsFileNeededByApp
SteamIsFileNeededByCache
SteamIsLoggedIn
SteamIsSecureComputer
SteamIsSubscribed
SteamIsUsingSdkContentServer
SteamLaunchApp
SteamLoadCacheFromDir
SteamLoadFileToApp
SteamLoadFileToCache
SteamLog
SteamLogResourceLoadFinished
SteamLogResourceLoadStarted
SteamLogin
SteamLogout
SteamMiniDumpInit
SteamMountAppFilesystem
SteamMountFilesystem
SteamMoveApp
SteamNumAppsRunning
SteamOpenFile
SteamOpenFile64
SteamOpenFileEx
SteamOpenTmpFile
SteamOptionalCleanUpAfterClientHasDisconnected
SteamPauseCachePreloading
SteamPrintFile
SteamProcessCall
SteamProcessOngoingUserIDTicketValidation
SteamPutc
SteamReadFile
SteamRefreshAccountInfo
SteamRefreshAccountInfo2
SteamRefreshAccountInfoEx
SteamRefreshLogin
SteamReleaseCacheFiles
SteamRemoveAppDependency
SteamRepairOrDecryptCaches
SteamRequestAccountsByCdKeyEmail
SteamRequestAccountsByEmailAddressEmail
SteamRequestEmailAddressVerificationEmail
SteamRequestForgottenPasswordEmail
SteamResumeCachePreloading
SteamSeekFile
SteamSeekFile64
SteamSetAppCacheSize
SteamSetAppVersion
SteamSetCacheDefaultDirectory
SteamSetMaxStallCount
SteamSetNotificationCallback
SteamSetUser
SteamSetUser2
SteamSetvBuf
SteamShutdownEngine
SteamShutdownSteamBridgeInterface
SteamShutdownUserIDTicketValidator
SteamSizeFile
SteamSizeFile64
SteamStartEngine
SteamStartEngineEx
SteamStartLoadingCache
SteamStartValidatingNewValveCDKey
SteamStartValidatingUserIDTicket
SteamStartup
SteamStat
SteamStat64
SteamStopLoadingCache
SteamSubscribe
SteamTellFile
SteamTellFile64
SteamUninstall
SteamUnmountAppFilesystem
SteamUnmountFilesystem
SteamUnsubscribe
SteamUpdateAccountBillingInfo
SteamUpdateSubscriptionBillingInfo
SteamVerifyEmailAddress
SteamVerifyPassword
SteamWaitForAppReadyToLaunch
SteamWaitForAppResources
SteamWaitForResources
SteamWasBlobRegistryDeleted
SteamWriteFile
SteamWriteMiniDumpFromAssert
SteamWriteMiniDumpSetComment
SteamWriteMiniDumpUsingExceptionInfo
SteamWriteMiniDumpUsingExceptionInfoWithBuildId
SteamWriteMiniDumpWithAppID
_f
g_dwDllEntryThreadId
Sections
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Fortnite Hack/natives_call.dll.ini.dll windows x86
Password: cheat
a8173563daecffff8a0dc6089d5fe9ef
Code Sign
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5cCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01/08/2013, 12:00Not After15/01/2038, 12:00SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23/03/2022, 00:00Not After22/03/2037, 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before29/04/2021, 00:00Not After28/04/2036, 23:59SubjectCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before29/03/2022, 00:00Not After14/03/2033, 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4Certificate
IssuerCN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=USNot Before07/10/2021, 00:00Not After09/10/2024, 23:59SubjectCN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
e6:60:28:53:c1:79:b5:fb:d9:5e:f0:8f:0c:4f:9c:c5:c2:ba:f5:41:3e:cd:5a:e4:d9:f3:18:29:b6:af:a2:2bSigner
Actual PE Digeste6:60:28:53:c1:79:b5:fb:d9:5e:f0:8f:0c:4f:9c:c5:c2:ba:f5:41:3e:cd:5a:e4:d9:f3:18:29:b6:af:a2:2bDigest Algorithmsha256PE Digest MatchestrueSignature Validations
TrustedtrueVerification
Signing CertificateCN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US07/06/2022, 03:20 Valid: true
Chain 1
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
CommandLineToArgvW
ShellExecuteW
kernel32
DeleteCriticalSection
GetExitCodeProcess
OpenProcess
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
LoadLibraryExA
LoadLibraryExW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
FindClose
DeviceIoControl
GetLastError
VerSetConditionMask
CreateDirectoryW
CreateFileA
DeleteFileW
GetFullPathNameW
WriteFile
SetLastError
Sleep
GetCurrentProcess
GetCurrentProcessId
InitializeCriticalSection
GetVersionExA
LoadLibraryA
GlobalAlloc
GlobalUnlock
GlobalLock
LocalFree
MoveFileExW
VerifyVersionInfoW
SetEnvironmentVariableW
CloseHandle
WriteConsoleW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
DecodePointer
HeapReAlloc
GetTimeZoneInformation
SetStdHandle
GetFileAttributesW
GetCurrentDirectoryW
GetCommandLineW
GetCommandLineA
FreeLibrary
GetEnvironmentVariableA
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
GetSystemInfo
GetProcessAffinityMask
DebugBreak
GetProcessHeaps
SetUnhandledExceptionFilter
SetProcessAffinityMask
LCMapStringW
CompareStringW
GetConsoleOutputCP
HeapAlloc
GetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleMode
LocalAlloc
SetThreadAffinityMask
HeapFree
ExitProcess
HeapValidate
HeapSize
TlsFree
TlsSetValue
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
VirtualQuery
EncodePointer
InterlockedFlushSList
RtlUnwind
InitializeSListHead
TlsGetValue
GetStartupInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
TlsAlloc
FindFirstFileExW
FindNextFileW
FlushFileBuffers
GetDiskFreeSpaceA
GetDriveTypeW
GetFileInformationByHandle
GetFileSizeEx
ReadFile
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
GetTempPathW
SleepEx
GetSystemTimeAsFileTime
GetTempPathA
RaiseException
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcessHeap
HeapSetInformation
HeapLock
HeapUnlock
HeapWalk
HeapQueryInformation
TerminateProcess
GlobalMemoryStatusEx
VirtualAlloc
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThread
OpenThread
TerminateThread
GetExitCodeThread
user32
GetDlgItemInt
SetDlgItemInt
GetDlgItem
EndDialog
DialogBoxParamA
SetWindowPos
wsprintfA
IsWindowVisible
GetWindowRect
EnumWindows
GetWindowThreadProcessId
OpenClipboard
GetDesktopWindow
MessageBoxA
GetWindowTextLengthA
EmptyClipboard
SetClipboardData
CloseClipboard
SetDlgItemTextA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
oleaut32
VariantClear
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
ws2_32
htonl
htons
ntohl
ntohs
send
freeaddrinfo
closesocket
connect
recv
socket
__WSAFDIsSet
bind
recvfrom
select
sendto
getaddrinfo
Exports
Exports
SteamAbortCall
SteamAbortOngoingUserIDTicketValidation
SteamAckSubscriptionReceipt
SteamBlockingCall
SteamChangeAccountName
SteamChangeEmailAddress
SteamChangeForgottenPassword
SteamChangeOfflineStatus
SteamChangePassword
SteamChangePersonalQA
SteamCheckAppOwnership
SteamCleanup
SteamClearError
SteamCloseFile
SteamCreateAccount
SteamCreateCachePreloaders
SteamCreateLogContext
SteamDefragCaches
SteamDeleteAccount
SteamEnumerateApp
SteamEnumerateAppDependency
SteamEnumerateAppIcon
SteamEnumerateAppLaunchOption
SteamEnumerateAppVersion
SteamEnumerateSubscription
SteamEnumerateSubscriptionDiscount
SteamEnumerateSubscriptionDiscountQualifier
SteamFindApp
SteamFindClose
SteamFindFirst
SteamFindFirst64
SteamFindNext
SteamFindNext64
SteamFindServersGetErrorString
SteamFindServersIterateServer
SteamFindServersNumServers
SteamFlushCache
SteamFlushFile
SteamForceCellId
SteamForgetAllHints
SteamGenerateSuggestedAccountNames
SteamGetAccountStatus
SteamGetAppCacheSize
SteamGetAppDLCStatus
SteamGetAppDependencies
SteamGetAppDir
SteamGetAppIds
SteamGetAppPurchaseCountry
SteamGetAppStats
SteamGetAppUpdateStats
SteamGetAppUserDefinedInfo
SteamGetAppUserDefinedRecord
SteamGetCacheDecryptionKey
SteamGetCacheDefaultDirectory
SteamGetCacheFilePath
SteamGetCachePercentFragmentation
SteamGetContentServerInfo
SteamGetCurrentAppId
SteamGetCurrentCellID
SteamGetCurrentEmailAddress
SteamGetDepotParent
SteamGetEncryptedUserIDTicket
SteamGetEncryptionKeyToSendToNewClient
SteamGetFileAttributeFlags
SteamGetLocalClientVersion
SteamGetLocalFileCopy
SteamGetNumAccountsWithEmailAddress
SteamGetOfflineStatus
SteamGetSponsorUrl
SteamGetSubscriptionExtendedInfo
SteamGetSubscriptionIds
SteamGetSubscriptionPurchaseCountry
SteamGetSubscriptionReceipt
SteamGetSubscriptionStats
SteamGetTotalUpdateStats
SteamGetUser
SteamGetUserType
SteamGetVersion
SteamGetc
SteamHintResourceNeed
SteamInitializeUserIDTicketValidator
SteamInsertAppDependency
SteamIsAccountNameInUse
SteamIsAppSubscribed
SteamIsCacheLoadingEnabled
SteamIsFileImmediatelyAvailable
SteamIsFileNeededByApp
SteamIsFileNeededByCache
SteamIsLoggedIn
SteamIsSecureComputer
SteamIsSubscribed
SteamIsUsingSdkContentServer
SteamLaunchApp
SteamLoadCacheFromDir
SteamLoadFileToApp
SteamLoadFileToCache
SteamLog
SteamLogResourceLoadFinished
SteamLogResourceLoadStarted
SteamLogin
SteamLogout
SteamMiniDumpInit
SteamMountAppFilesystem
SteamMountFilesystem
SteamMoveApp
SteamNumAppsRunning
SteamOpenFile
SteamOpenFile64
SteamOpenFileEx
SteamOpenTmpFile
SteamOptionalCleanUpAfterClientHasDisconnected
SteamPauseCachePreloading
SteamPrintFile
SteamProcessCall
SteamProcessOngoingUserIDTicketValidation
SteamPutc
SteamReadFile
SteamRefreshAccountInfo
SteamRefreshAccountInfo2
SteamRefreshAccountInfoEx
SteamRefreshLogin
SteamReleaseCacheFiles
SteamRemoveAppDependency
SteamRepairOrDecryptCaches
SteamRequestAccountsByCdKeyEmail
SteamRequestAccountsByEmailAddressEmail
SteamRequestEmailAddressVerificationEmail
SteamRequestForgottenPasswordEmail
SteamResumeCachePreloading
SteamSeekFile
SteamSeekFile64
SteamSetAppCacheSize
SteamSetAppVersion
SteamSetCacheDefaultDirectory
SteamSetMaxStallCount
SteamSetNotificationCallback
SteamSetUser
SteamSetUser2
SteamSetvBuf
SteamShutdownEngine
SteamShutdownSteamBridgeInterface
SteamShutdownUserIDTicketValidator
SteamSizeFile
SteamSizeFile64
SteamStartEngine
SteamStartEngineEx
SteamStartLoadingCache
SteamStartValidatingNewValveCDKey
SteamStartValidatingUserIDTicket
SteamStartup
SteamStat
SteamStat64
SteamStopLoadingCache
SteamSubscribe
SteamTellFile
SteamTellFile64
SteamUninstall
SteamUnmountAppFilesystem
SteamUnmountFilesystem
SteamUnsubscribe
SteamUpdateAccountBillingInfo
SteamUpdateSubscriptionBillingInfo
SteamVerifyEmailAddress
SteamVerifyPassword
SteamWaitForAppReadyToLaunch
SteamWaitForAppResources
SteamWaitForResources
SteamWasBlobRegistryDeleted
SteamWriteFile
SteamWriteMiniDumpFromAssert
SteamWriteMiniDumpSetComment
SteamWriteMiniDumpUsingExceptionInfo
SteamWriteMiniDumpUsingExceptionInfoWithBuildId
SteamWriteMiniDumpWithAppID
_f
g_dwDllEntryThreadId
Sections
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ