C:\Users\roka\Downloads\TO_SAVE\TO_SAVE\OG FORTNITE SRC\FN 8.51\x64\Release\fortnight.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Fortnite 8.51 Internal/fort_elixir.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Fortnite 8.51 Internal/fort_elixir.dll
Resource
win10v2004-20240226-en
General
-
Target
07-03-2024_GOo2Pdii6NlUnms.zip
-
Size
188KB
-
MD5
3a6e94e4c1b13f90eca5c6215ccfa45a
-
SHA1
86f1faafb1b44d16b2149074915409289ec1ffb1
-
SHA256
895d6a76e6308c5e719e24527d49c96fde4a6c5a3155d8df3e9a5c0432c7da41
-
SHA512
55b85e5e1888be7c3db2ee8f648202eb18c4bc85c6f71ad71ef84ad42b82b4b6093e62c59172a02f086a4116ef375a4fbd4da89adaa2c46d3c1e4814d9c2ff7d
-
SSDEEP
3072:709mHaEKgou3xgZCy0u5TYIUi2jbTD8m8fkLzhhI/Od5LQVle7dJ+bTxBPrJftDv:709mZKgPxgAyxlATgZfC5/J+b1BPt9j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Fortnite 8.51 Internal/fort_elixir.dll
Files
-
07-03-2024_GOo2Pdii6NlUnms.zip.zip
Password: 123
-
Fortnite 8.51 Internal/fort_elixir.dll.dll windows:6 windows x64 arch:x64
Password: 123
63c95bc7ee84df50bcfd1d95f9dee69e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
Sleep
Beep
GetModuleHandleW
AllocConsole
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetProcAddress
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
WriteConsoleW
SetEndOfFile
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
CreateFileW
SetStdHandle
HeapSize
RtlUnwind
user32
MessageBoxA
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ