Static task
static1
Behavioral task
behavioral1
Sample
YXKFortnite.gp.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
YXKFortnite.gp.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
YXKFortnite.gp.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
YXKFortnite.gp.exe
Resource
win10v2004-20230220-en
General
-
Target
YXKFortnite.gp.rar
-
Size
123KB
-
MD5
7c4dc6f28a62bc4a254132b6933d555c
-
SHA1
aa16f756b36fbb509eead9bd9ae00cbe8fb6fb9a
-
SHA256
a5b4ff8f50dbdd401cd7a950fc11e24d26dd80da5f82506b2f86e0278e929b43
-
SHA512
6573093d0410e00236b51a043361a9b32a7c8417260fb614dd79458e5b03df62f625c512945623268dd1dba744f196810d7d870aa0740945e2c26d84240cd967
-
SSDEEP
3072:RdAcxPXqHR8wLgK2p+4FMmSeXDYtnYgCEvbeEzsWNYwluLhxTfFK6:L9XAOwLgK2tF7SGYtnYgCEvSqsIYjfQ6
Malware Config
Signatures
Files
-
YXKFortnite.gp.rar.rar
-
YXKFortnite.gp.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ