General

  • Target

    Fortnite_4095806_20180529.exe

  • Size

    9.7MB

  • MD5

    0bf87f5855733f411a8e200e42c9c960

  • SHA1

    1ac0de036a18bf39600d06d24295d5f7721e39e7

  • SHA256

    588b628bf57a49f998ae8e4476adc82298ca390e915ec26c6b21b33c574280c7

  • SHA512

    ecadcd6bdfe09a2d3b2857822921c639a5c24165c03ce33af05a5f6a5bc3645bf6f0fe640f8253e40d9d673402bed5b847d32fe793d5b07de58c7364cd2f2fd0

  • SSDEEP

    196608:XAIpHaau06fDD0UxONFDojf12nfGxvu0otOkj4HGkkVpPKtCSpDJtSEkz+JSC10T:XAYHaau067oUoNFS16likjp3ViHV++Js

Score
3/10

Malware Config

Signatures

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

  • NSIS installer 2 IoCs

Files

  • Fortnite_4095806_20180529.exe
    .exe windows:4 windows x86 arch:x86

    099c0646ea7282d232219f8807883be0


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/Database/conf.db
  • $_2_/DuiLib.dll
    .dll windows:5 windows x86 arch:x86

    6f60bf909bf06d2df93982bc69e3e847


    Headers

    Imports

    Exports

    Sections

  • $_2_/PCGameDL.exe
    .exe windows:5 windows x86 arch:x86

    216ced88cc09e6f8d7a00a0b9ef8f6c0


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/TenioDL.dll
    .dll windows:5 windows x86 arch:x86

    06492b01cdd1424f53ef434809471907


    Headers

    Imports

    Sections

  • $_2_/TenioDL.exe
    .exe windows:5 windows x86 arch:x86

    3449a0d1ad1c4f596547289e9163bcc7


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/TenioDL_core.dll
    .dll windows:5 windows x86 arch:x86

    cf21ebf1b84325ab8d212502a01dfacd


    Headers

    Imports

    Exports

    Sections

  • $_2_/curllib.dll
    .dll windows:5 windows x86 arch:x86

    588afaf3446fd847b151a8c2f5f81e0d


    Headers

    Imports

    Exports

    Sections

  • $_2_/libcurl.dll
    .dll windows:5 windows x86 arch:x86

    588afaf3446fd847b151a8c2f5f81e0d


    Headers

    Imports

    Exports

    Sections

  • $_2_/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    308b55923b8ee86bd0a3eb5cd2794173


    Headers

    Imports

    Exports

    Sections

  • $_2_/license/directui license.txt
  • $_2_/license/duilib license.txt
  • $_2_/mfc120u.dll
    .dll windows:6 windows x86 arch:x86

    bf9bb776792ebfae57684ede20e9eee4


    Code Sign

    Headers

    Imports

    Sections

  • $_2_/msvcp120.dll
    .dll windows:6 windows x86 arch:x86

    6ccda270a497a2c5a36a7f385cc9910d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/msvcr120.dll
    .dll windows:6 windows x86 arch:x86

    aa8d086deb6960b10f8791df466a5610


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/p2papp.dll
    .dll windows:5 windows x86 arch:x86

    8348f9b2263215b556a9cfa8110d64e6


    Headers

    Imports

    Exports

    Sections

  • $_2_/skin/GDLRes_COMMON.zip
    .zip
  • agreement/agreement.xml
    .xml
  • agreement/banner.png
    .png
  • agreement/bg.png
    .png
  • agreement/bg_title.png
    .png
  • agreement/cancel_hover.png
    .png
  • agreement/cancel_normal.png
    .png
  • agreement/checkbox_normal.png
    .png
  • agreement/checkbox_selected_normal.png
    .png
  • agreement/close_normal.png
    .png
  • agreement/confirm_hover.png
    .png
  • agreement/confirm_normal.png
    .png
  • agreement/files.png
    .png
  • agreement/selpath_normal.png
    .png
  • agreement/vscroll_bg.png
    .png
  • agreement/vscroll_down.png
    .png
  • agreement/vscroll_thumb.png
    .png
  • agreement/vscroll_up.png
    .png
  • basewnd/basewnd.xml
  • downloadwnd/downloadwnd.xml
  • exit/bg.png
    .png
  • exit/bg_stext.png
    .png
  • exit/cancel_hover.png
    .png
  • exit/cancel_normal.png
    .png
  • exit/cancel_push.png
    .png
  • exit/checkbox_normal.png
    .png
  • exit/checkbox_select_normal.png
    .png
  • exit/close_hover.png
    .png
  • exit/close_normal.png
    .png
  • exit/close_push.png
    .png
  • exit/confirm_disable.png
    .png
  • exit/confirm_hover.png
    .png
  • exit/confirm_normal.png
    .png
  • exit/confirm_push.png
    .png
  • exit/exit.xml
    .xml
  • exit/radio_normal.png
    .png
  • exit/radio_select_normal.png
    .png
  • mainframe/Rotation_active.png
    .png
  • mainframe/Rotation_inactive.png
    .png
  • mainframe/app_icon.png
    .png
  • mainframe/banner.png
    .png
  • mainframe/bg_bulletin.png
    .png
  • mainframe/bg_businese.png
    .png
  • mainframe/bg_gift.png
    .png
  • mainframe/bg_giftarea.png
    .png
  • mainframe/bg_giftstatus.png
    .png
  • mainframe/bg_operation.png
    .png
  • mainframe/bg_progress.png
    .png
  • mainframe/bg_view.png
    .png
  • mainframe/bg_welcome.png
    .png
  • mainframe/blind.png
    .png
  • mainframe/blink.png
    .png
  • mainframe/change_disable.png
    .png
  • mainframe/change_hover.png
    .png
  • mainframe/change_normal.png
    .png
  • mainframe/change_push.png
    .png
  • mainframe/checkbox_normal.png
    .png
  • mainframe/checkbox_selected_normal.png
    .png
  • mainframe/close_disable.png
    .png
  • mainframe/close_hover.png
    .png
  • mainframe/close_normal.png
    .png
  • mainframe/close_push.png
    .png
  • mainframe/continue_disable.png
    .png
  • mainframe/continue_hover.png
    .png
  • mainframe/continue_normal.png
    .png
  • mainframe/continue_push.png
    .png
  • mainframe/download_disable.png
    .png
  • mainframe/download_hover.png
    .png
  • mainframe/download_normal.png
    .png
  • mainframe/download_push.png
    .png
  • mainframe/files.png
    .png
  • mainframe/gift_disable.png
    .png
  • mainframe/gift_hover.png
    .png
  • mainframe/gift_normal.png
    .png
  • mainframe/gift_push.png
    .png
  • mainframe/ktlz.png
    .png
  • mainframe/mainfrm.xml
    .xml
  • mainframe/min_disable.png
    .png
  • mainframe/min_hover.png
    .png
  • mainframe/min_normal.png
    .png
  • mainframe/min_push.png
    .png
  • mainframe/notreach.png
    .png
  • mainframe/pause_disable.png
    .png
  • mainframe/pause_hover.png
    .png
  • mainframe/pause_normal.png
    .png
  • mainframe/pause_push.png
    .png
  • mainframe/progress_normal.png
    .png
  • mainframe/progress_speedup.png
    .png
  • mainframe/receive_disable.png
    .png
  • mainframe/receive_hover.png
    .png
  • mainframe/receive_normal.png
    .png
  • mainframe/receive_push.png
    .png
  • mainframe/role.png
    .png
  • mainframe/secret_gift.png
    .png
  • mainframe/sending.png
    .png
  • mainframe/sent.png
    .png
  • mainframe/setting_disable.png
    .png
  • mainframe/setting_hover.png
    .png
  • mainframe/setting_normal.png
    .png
  • mainframe/setting_push.png
    .png
  • mainframe/setup_disable.png
    .png
  • mainframe/setup_hover.png
    .png
  • mainframe/setup_normal.png
    .png
  • mainframe/setup_push.png
    .png
  • mainframe/speaker.png
    .png
  • mainframe/speed_backup.png
    .png
  • mainframe/speed_cdn.png
    .png
  • mainframe/speed_ebit.png
    .png
  • mainframe/speed_limit.png
    .png
  • mainframe/speed_normal.png
    .png
  • mainframe/speed_vip_cdn.png
    .png
  • mainframe/speed_vip_ebit.png
    .png
  • mainframe/switch_normal.png
    .png
  • mainframe/webkitwnd.xml
    .xml
  • mainframe/xflz.png
    .png
  • notifymenu/menu_separate.png
    .png
  • notifymenu/notifymenu.xml
  • others/Combo_nor.bmp
  • others/Combo_over.bmp
  • others/bg.png
    .png
  • others/cancel_disable.png
    .png
  • others/cancel_hover.png
    .png
  • others/cancel_normal.png
    .png
  • others/cancel_push.png
    .png
  • others/close_hover.png
    .png
  • others/close_normal.png
    .png
  • others/close_push.png
    .png
  • others/confirm_disable.png
    .png
  • others/confirm_hover.png
    .png
  • others/confirm_normal.png
    .png
  • others/confirm_push.png
    .png
  • others/err_pic.png
    .png
  • others/gamearea.xml
    .xml
  • others/know_disable.png
    .png
  • others/know_hover.png
    .png
  • others/know_normal.png
    .png
  • others/know_push.png
    .png
  • setting/Combo_nor.bmp
  • setting/Combo_over.bmp
  • setting/bg.png
    .png
  • setting/bg_ltext.png
    .png
  • setting/bg_stext.png
    .png
  • setting/cancel_hover.png
    .png
  • setting/cancel_normal.png
    .png
  • setting/cancel_push.png
    .png
  • setting/checkbox_normal.png
    .png
  • setting/checkbox_selected_normal.png
    .png
  • setting/close_hover.png
    .png
  • setting/close_normal.png
    .png
  • setting/close_push.png
    .png
  • setting/confirm_disable.png
    .png
  • setting/confirm_hover.png
    .png
  • setting/confirm_normal.png
    .png
  • setting/confirm_push.png
    .png
  • setting/down_hover.png
    .png
  • setting/down_normal.png
    .png
  • setting/setting.xml
    .xml
  • setting/setting.zip
    .zip
  • confirm_disable.png
    .png
  • confirm_hover.png
    .png
  • confirm_normal.png
    .png
  • confirm_push.png
    .png
  • setting/up_hover.png
    .png
  • setting/up_normal.png
    .png
  • $_2_/skin/common/Common_big.ico
  • $_2_/skin/common/Common_small.ico
  • $_2_/sqlite3.dll
    .dll windows:5 windows x86 arch:x86

    fe7c853638edb85de0210927c503c14e


    Headers

    Imports

    Exports

    Sections

  • $_2_/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    9d94280f9d9c142f4d573f47d616a114


    Headers

    Imports

    Exports

    Sections

  • $_2_/vccorlib120.dll
    .dll windows:6 windows x86 arch:x86

    9fc5caa45dc840cfefd11b8e12af14d6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • $_2_/version.dll
    .dll windows:6 windows x86 arch:x86

    105f233d0e5db86b1f4409873b8b8e3e


    Headers

    Imports

    Exports

    Sections

  • $_2_/wke.dll
    .dll windows:5 windows x86 arch:x86

    3c53a068e7d0d3fbb24ce617e12027a5


    Headers

    Imports

    Exports

    Sections