Static task
static1
Behavioral task
behavioral1
Sample
FreeFortniteVbucks.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
FreeFortniteVbucks.exe
Resource
win10v2004-20240709-en
General
-
Target
FreeFortniteVbucks.exe
-
Size
12.9MB
-
MD5
f4dfe31dcd4e1ea36da485bb03856417
-
SHA1
9d9a50d5a1c4be2caf59f792dd8ac8184ff13b74
-
SHA256
be3eeda22c1620f47195d1e1002753b9a15ed3a044e8db38949fd236bcc08831
-
SHA512
993d1688a2b308fcd8075e439e12513823920d57cef92269189b255cf7229691038d441452715a0a1457611394021bfc407577905f381192b01a44ea6c4ac963
-
SSDEEP
393216:NKiCa/gqmVWNIoc3IrDE0EyoZedrQDgF:N7Ca/gNkTRE0vo0JD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource FreeFortniteVbucks.exe
Files
-
FreeFortniteVbucks.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12.9MB - Virtual size: 12.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ