C:\Users\$udo\Desktop\fortnite-AE\Release\test.pdb
Static task
static1
Behavioral task
behavioral1
Sample
test.dll
Resource
win10-20240221-en
General
-
Target
test.dll
-
Size
85KB
-
MD5
d08f00d282aa7dffdbbd457365465310
-
SHA1
eed0970fe043ba8c173253a5cfb2b540aff5176e
-
SHA256
008187a3277e3bf23200938570c970546a2b4c35988c3b55cd43e7fc0908eaa3
-
SHA512
120634d6f431198cad3ed8105d9937a70484298ef06190b8a794a37a1161029fd15544c27774dc12de03ae1db2eca0e62f769c5eb1fff8eff285606c47de2205
-
SSDEEP
1536:qQ132+iBIw+XjtjViWKz6PRcPee8v1tI9Xr5WYsJZ6:qigtExTg6PpvcVEjZ6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.dll
Files
-
test.dll.dll windows:6 windows x64 arch:x64
24b96335dcdab9793eacb08766cd6c2d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlCaptureContext
user32
SendInput
GetAsyncKeyState
vcruntime140
__std_exception_destroy
__C_specific_handler
__std_type_info_destroy_list
__std_exception_copy
memcpy
_CxxThrowException
memset
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
api-ms-win-crt-math-l1-1-0
cosf
sinf
round
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_cexit
_configure_narrow_argv
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ