Static task
static1
Behavioral task
behavioral1
Sample
fortnite 2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
fortnite 2.exe
Resource
win10v2004-20220901-en
General
-
Target
fortnite 2.exe
-
Size
5.7MB
-
MD5
d4949e756f333384f8de1b2764f4bfb5
-
SHA1
ade6cce52bc1e2644e7fef906fa26a4b1ae78eb9
-
SHA256
5aca93196ecacea5d3ffb1e7218234d44b634e2e9ca22c74ba1220a65789c70c
-
SHA512
94012554fa9c8854f52acb35efcf8ba216816cd1fcaaafaa9714bb974755e971f5000e9ca666c42e11319404c316a5ad3141d4f0c99f21dec95a8394ad03f50e
-
SSDEEP
98304:lvhHMK3zs7lsCpen/n8eAszBnEChrPYMN5vLJqyGK4kn0I8:lvZMp7aCpY/nb9BnEChrPYjZkn0
Malware Config
Signatures
Files
-
fortnite 2.exe.exe windows x86
0dca6ffea37f2a904c82ecdde35d72d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord219
PathFileExistsA
ws2_32
connect
closesocket
bind
accept
WSACleanup
gethostname
getaddrinfo
WSAGetLastError
WSAStartup
socket
shutdown
setsockopt
send
recvfrom
recv
ntohs
listen
inet_ntoa
inet_addr
htons
getpeername
ioctlsocket
dinput8
DirectInput8Create
wininet
HttpEndRequestA
InternetCloseHandle
InternetGetConnectedState
InternetConnectA
InternetReadFile
InternetWriteFile
InternetSetOptionA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpQueryInfoA
InternetOpenA
HttpSendRequestExA
HttpSendRequestA
xinput9_1_0
XInputGetState
opengl32
glTexSubImage2D
glTexParameteri
glTexParameterf
glTexImage2D
glScissor
glReadPixels
glReadBuffer
glPolygonOffset
glPixelStorei
glGetTexImage
glGetIntegerv
glViewport
glGetError
glGenTextures
glFrontFace
glEnable
glDrawElements
glDrawBuffer
glDrawArrays
glDisable
glDepthRange
glDepthMask
glDepthFunc
glDeleteTextures
glCullFace
glClearDepth
glClearColor
glClear
glBindTexture
wglMakeCurrent
wglGetProcAddress
wglDeleteContext
wglCreateContext
kernel32
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleMode
GetConsoleCP
GetUserDefaultLCID
WriteFile
HeapFree
HeapReAlloc
HeapAlloc
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
EnumSystemLocalesW
PeekNamedPipe
GetFileType
FlushFileBuffers
ReadConsoleW
GetTimeZoneInformation
GetCurrentDirectoryW
SetStdHandle
GetProcessHeap
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetCommandLineA
GetCommandLineW
FindFirstFileExW
SetEndOfFile
HeapSize
GetACP
RaiseException
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
EncodePointer
DecodePointer
SetLastError
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
GetStdHandle
LoadLibraryA
WriteConsoleW
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
OpenProcess
TerminateProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
Sleep
FindClose
SetFileTime
CloseHandle
GetSystemInfo
CreateEventA
GetModuleFileNameW
GetModuleHandleA
CreateProcessA
OutputDebugStringA
GetWindowsDirectoryA
SetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
CreateFileA
GetFileAttributesW
GetFileAttributesExA
DeleteFileW
FindFirstFileW
FindNextFileW
CopyFileA
GetVolumeInformationA
QueryPerformanceCounter
QueryPerformanceFrequency
MultiByteToWideChar
WideCharToMultiByte
GetLocaleInfoA
GetLogicalDrives
LocalFree
GetLastError
FormatMessageA
InitializeCriticalSection
WaitForMultipleObjects
ExitProcess
lstrlenA
GetTickCount
GetCurrentThreadId
GetDriveTypeW
CreateFileW
GetTempPathW
GetFullPathNameA
GetFullPathNameW
FreeLibraryAndExitThread
ExitThread
CreateThread
ReadFile
GetModuleHandleExW
LoadLibraryExW
GetSystemTimeAsFileTime
InterlockedPushEntrySList
RtlUnwind
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
user32
RegisterClassExW
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
PostQuitMessage
ReleaseCapture
LoadIconA
LoadCursorA
ReleaseDC
RegisterClassExA
DefWindowProcA
SetWindowLongA
GetWindowLongA
ClientToScreen
SetCursorPos
ShowCursor
GetClientRect
SetWindowTextW
GetDC
GetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
DestroyWindow
CreateWindowExA
LoadImageA
LoadIconW
LoadCursorW
GetDesktopWindow
ScreenToClient
MessageBoxA
AdjustWindowRectEx
GetWindowRect
ValidateRect
UpdateWindow
GetSystemMetrics
SetCapture
GetAsyncKeyState
SetWindowPos
ShowWindow
CreateWindowExW
gdi32
StartPage
EndDoc
ChoosePixelFormat
SetPixelFormat
SwapBuffers
StartDocA
StretchBlt
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
EndPage
CreateBitmap
comdlg32
GetOpenFileNameA
CommDlgExtendedError
PrintDlgA
advapi32
RegOpenKeyExA
RegEnumValueA
RegQueryInfoKeyA
RegCloseKey
SystemFunction036
shell32
ShellExecuteA
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ole32
PropVariantClear
CreateBindCtx
CoInitializeEx
CoUninitialize
CoCreateInstance
CoSetProxyBlanket
oleaut32
SysAllocString
SysFreeString
Sections
.text Size: 4.4MB - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 735KB - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 399KB - Virtual size: 574KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ