Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
FortniteClient-Win64-Shipping1_1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
FortniteClient-Win64-Shipping1_1.exe
Resource
win10v2004-20220901-en
Target
FortniteClient-Win64-Shipping1_1.exe
Size
5.8MB
MD5
31bb0b7695232ff457078bd075d1f73d
SHA1
24fad0b7bd9f05c3bbda983179d4f2c5107ac8cb
SHA256
8d644f7a1f02c0b4f6c32556134a271cef93dd321aaacc243401c77664fa433e
SHA512
5f0cf7818af79b7a9cf08aac57bb66ec3a80d585b6c96715258f140feba9289d1e98a3b36a324d09290f152bdb117fc6131e6abecdae728276290d10c4a716ae
SSDEEP
98304:z9d9ZTbol24gRYLEBY3hf2jKHQeIb6UILkz1XwTucj4jisxF1A64L7MCItEbxT:zbPRYQBY4j+QBbhIL+XG9j4WsVx43+ti
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
D3D11CreateDeviceAndSwapChain
FreeLibrary
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetClientRect
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
ImmReleaseContext
D3DCompile
DwmExtendFrameIntoClientArea
IdnToAscii
ord45
CertGetNameStringA
accept
UuidCreate
GetModuleInformation
UnloadUserProfile
__CxxFrameHandler4
__std_exception_destroy
exit
realloc
rand
strtoll
__stdio_common_vsprintf
_localtime64_s
strncmp
_configthreadlocale
sqrtf
_stat64
ConvertSidToStringSidA
ShellExecuteA
WTSSendMessageW
T#wA4�������͔o�Mu[@u�w*Ӻz�1l�U�;��0�S���v�0�݇o�Y��>�����{�Q�,,T�Y��2�B&(�iK���I�&�u���ұ�&�R�4�6^Ϧξ&����H圄,�E?rm����O���$Jn���������eŸu�{��Y�R𠍱��B��(q��!����d������d!8��J�S�B����Cm����b��|���B�,�)ro:�����ٗ��o'�ǵ&_<�d�wsW8|��T���Jg� bA�Y(/�Ƥ���A�}.��� oW���w�tF���t1ܲt@c��^YR�t͗�c��F��V�A�%�� &� |�2�5a��/8�����uƍ��`lT�w�[�#��: Nq� �����ܾI�tW��xKM���j���W�9����=g��MV�\z,��BY��3Zѻ����ff,W�ۧ8��ً���Y��XG��}��h�Z ���_�+=�{��'Bԉ���`Zľ Z��I�5(� ~��������x>�oF��Mr��f�ç���W>Fm����*���:\?�H��4xᙠ�|�iuK/d��%P�D���3(�,;�(�� ��T�<*?�̣ޟ�~��2�^+���$U��^����ԄO�{y�D���kf���eg�Vz��a��zn���ܯ����j�<B��{�e�rEN�⎨�_O�rL�ÇY�-�-{z���n�F����1��e8�V�c�E�Ǟ�t�? ~~N'P��/�4����WL�h ,�`N���2`{.��e�e`�0{-�°G�N���N�Q.i�D����K��1���HU���M��ևf�a�9��0e���q���+$F������/�,�� �K�>�x0����J��,�|��q��qB�}�X�Dƒ��b���j5^�����ѹ��}�Xx '5�����՚k:h���fL*w��d���!�����W�K���o��I�yBU-<�(!@T6���WOe�BU1ο>�r�z}��QS� j6�$탅*L46�����C�wx1/���1��Ps�3!I�|��1�� �Mx �mO��$�Pc��J�n����A6H��9������K�@+ƮC3�M����t�r���S���'�=b����-���E�X,����I��W_9�J�\~)̈́��E䨳��I�.�C$�J�X��"c.J�fD�#�Le�q��O��}s�ٺE��"M���P�Ibm���lc�Z��_��1oA\����$�d*����ӽ�/����`�䒵�s���5n���36m<�D�Y�+����L���C�͢��v��](:��Z\�s�x�wV��gʱif�w%X� �Ӵ�����'��Hw#9,�.aP�\g����բ��!)iiJ���W�w!�ьB��?#3T�f�F���*�g��>5Z����H�,D�� �������zSdr/ⵈ������~|�~\C�b���"A`�m������D�q�"��f��,��d@ω�S)�-,�k}+A�:������H��b.ԙ�ad{:�D�EdbO&"��M/���X��$?�;H�J�Z��ާ}���|�zB8^N�ą��˃����������Qi�Vy�����5�y6#��^�̱��2������/��B�@sf.���ed�M��ʃ_cP1�Gʈv�����a5��� ��<3 �s���'Jw1E9�L���ގ����!��'������iLt�,\g��.��Ɋmz�&K�Rrc�M$>$i2�[:NjM<����qr(U��,������3#}���h�b�4������z��H������N���C��P��ژS�&���Q-wuE�Z��v���P5M)����Fy�!���\�U�8}�Dd�-�K�I.�)�� >=1�<ʿ[�0�?V%-�� ���C2�dR��j����/�6����U�g���]���$w��W�e�S�]t��H��/MCE �w�nNJ*T�p����Ob��ڊ~��#Q��/�Y����{�ǒ$t(��<�"�.�ܘz��~}9Ⴡ�R:ÌF�ⵛNù&��| �]]�b�'=k�p��rb>�:��nEޏ��.)SKn^[���5;�z��0�|�\��Ku���,g�j+��?B 3�x��x��w�@�����t3���P�1���Ӳ���t�Ü����7��҆��oᚇ�+�°�%XQa��� ''l��udZD�w�c��ɞ�aE�Z%�$��7 �l`��A&ʼ���lv����h�>WhrH�D!Hb��L��= �2�X���L���,Q��efjJ�1�`�=�ۉ[^�-#d�0��78����b��W8^]ВtX�3��J*�k!��L���� :�G�D�y�z.2������/��f23_�%�k��s֪���{:���Od������dz��u���݆����?��Rv��}�W�l���$A�1")�w�s�3oܒ��ʋ�<�6S2v�l9W}������'h���Չ��^A�����{��m�9n����5c\,r�>�[I��������N��~��ݒV�)?l�Z$�����O�_W�V2�;]}�e�DE����"����ey.o/Ǘ����ga�\q�9�_Q�~ ��#Hq� (�mk���S}/er^�݄t\��mt�S�t���o|�H���xxȋg�Ex�`6���1���bt�\�8�i�ٳ6�Fe�ށ7z��û��@P`6�#��&[���Cj��rswV�������8b<͐�l?�ȑ��3��Ǵ� ��.��%�.Qe���Hճ8��O��zjM%��(`�Jg�D亢�����$���ʬ���0�3��c�J�T��]��A�k ނ��?�2�_�'2 �5>G]��L�Q�Q@{R��Xb)m+�Q���4��z�]�F ]�$�6��]�����of+2r���p���� �p����Jnf2P�/�K�O�ۡ��LZ=��g�����7�G�#Q�%}�JX&�Tm,K-��:�'fh�.��&���{0V)�'��$ځ%<ᗏ�V,ݫ��S��l�ڗGP�]�ט
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ