C:\Users\Quisha\source\repos\Fortnite 7.4 External\x64\Release\Fortnite 7.4 External.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Project Nova External Cheat/All Hacks, Cheats, Injectors.url
Resource
win11-20240611-en
Behavioral task
behavioral2
Sample
Project Nova External Cheat/Fortnite 10.4 External.exe
Resource
win11-20240508-en
Behavioral task
behavioral3
Sample
Project Nova External Cheat/Fortnite 7.4 External.exe
Resource
win11-20240611-en
General
-
Target
Project_Nova_External_Cheat.zip
-
Size
1.3MB
-
MD5
3a9f74f3ee8578d60a21eb56d8406b87
-
SHA1
e482f67d9bb91655f0da6bac8fa390e31810f9d0
-
SHA256
8ff515eb1f12a202be7c864177b20271d4d6a4cbe1fc0b3f9b75e877c2086f9e
-
SHA512
604263374606e34fc9a3beb66f0bf8afd8a6c168a0c6e9337b3dcc4f7d151698165db75693a3abeda23eef96ac942bde850228f9ec55ad0c853e410547b64d73
-
SSDEEP
24576:HaLLfQyl7qKJraNI6L5ijtzn0iolBRew0cgzqQR1qbvbZf:HaLLfGKJuQjtjozQ2qCbv9
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Project Nova External Cheat/Fortnite 10.4 External.exe unpack001/Project Nova External Cheat/Fortnite 7.4 External.exe
Files
-
Project_Nova_External_Cheat.zip.zip
-
Project Nova External Cheat/All Hacks, Cheats, Injectors.url
-
Project Nova External Cheat/Fortnite 10.4 External.exe.exe windows:6 windows x64 arch:x64
6d9528388be63cd31307fc04ff602479
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
Process32First
WriteProcessMemory
Module32Next
Module32First
OpenProcess
CreateToolhelp32Snapshot
Process32Next
CloseHandle
GetExitCodeProcess
GlobalFree
GlobalAlloc
GetModuleHandleA
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
MultiByteToWideChar
ReadProcessMemory
LoadLibraryA
GlobalUnlock
WideCharToMultiByte
GetCurrentThreadId
GlobalLock
RtlCaptureContext
GetSystemTimeAsFileTime
InitializeSListHead
user32
DefWindowProcW
FindWindowA
GetWindowLongPtrA
GetWindowRect
GetAsyncKeyState
DestroyWindow
GetSystemMetrics
UnregisterClassW
RegisterClassExW
ShowWindow
SetWindowLongA
SetLayeredWindowAttributes
MapVirtualKeyA
TranslateMessage
PeekMessageA
PostQuitMessage
UpdateWindow
GetKeyState
GetMessageExtraInfo
LoadCursorA
DispatchMessageA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
GetKeyNameTextA
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
CreateWindowExW
msvcp140
_Query_perf_frequency
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
imm32
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
__current_exception
__C_specific_handler
__std_terminate
__std_exception_copy
__std_exception_destroy
__current_exception_context
strstr
memmove
memcpy
memcmp
memchr
memset
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
realloc
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
exit
_exit
_configure_narrow_argv
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_initialize_narrow_environment
terminate
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
_cexit
_get_narrow_winmain_command_line
api-ms-win-crt-time-l1-1-0
clock
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__p__commode
_set_fmode
ftell
__acrt_iob_func
fflush
fclose
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fseek
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
strncpy
api-ms-win-crt-convert-l1-1-0
strtol
atof
api-ms-win-crt-math-l1-1-0
fmodf
tanf
cosf
ceilf
powf
sinf
sqrtf
ldexp
atanf
atan2f
asinf
acosf
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Project Nova External Cheat/Fortnite 7.4 External.exe.exe windows:6 windows x64 arch:x64
888afbc8a9c5ec8601f2e4ddf6020fe0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Quisha\source\repos\Fortnite 7.4 External\x64\Release\Fortnite 7.4 External.pdb
Imports
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
Process32First
WriteProcessMemory
Module32Next
Module32First
OpenProcess
CreateToolhelp32Snapshot
Process32Next
CloseHandle
GetExitCodeProcess
MultiByteToWideChar
GetSystemTimeAsFileTime
GlobalUnlock
GetCurrentProcessId
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
ReadProcessMemory
Sleep
GetModuleHandleA
WideCharToMultiByte
GlobalLock
GlobalFree
GetCurrentThreadId
RtlCaptureContext
GlobalAlloc
InitializeSListHead
user32
DefWindowProcW
FindWindowA
GetWindowLongPtrA
GetWindowRect
GetAsyncKeyState
DestroyWindow
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
SetWindowLongA
MapVirtualKeyA
SetLayeredWindowAttributes
TranslateMessage
PeekMessageA
PostQuitMessage
UpdateWindow
GetKeyState
GetMessageExtraInfo
LoadCursorA
DispatchMessageA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
GetKeyNameTextA
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
GetSystemMetrics
msvcp140
_Query_perf_frequency
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
__current_exception
__C_specific_handler
__std_terminate
__std_exception_copy
__std_exception_destroy
__current_exception_context
strstr
memmove
memcpy
memcmp
memchr
memset
api-ms-win-crt-heap-l1-1-0
malloc
_set_new_mode
free
_callnewh
realloc
api-ms-win-crt-runtime-l1-1-0
_initterm
_initterm_e
exit
_exit
_configure_narrow_argv
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_initialize_narrow_environment
terminate
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
_cexit
_get_narrow_winmain_command_line
api-ms-win-crt-time-l1-1-0
clock
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__p__commode
_set_fmode
ftell
__acrt_iob_func
fflush
fclose
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fseek
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
strncmp
strcmp
strncpy
api-ms-win-crt-convert-l1-1-0
strtol
atof
api-ms-win-crt-math-l1-1-0
fmodf
tanf
cosf
ceilf
powf
sinf
sqrtf
ldexp
atanf
atan2f
asinf
acosf
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 353KB - Virtual size: 353KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 556B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ