General

  • Target

    source.zip

  • Size

    4.9MB

  • MD5

    6aa6c2a2f25b3697f19cadd272ed4267

  • SHA1

    d5463281a9cf245305ea692aa01a1e175f4b2883

  • SHA256

    56c3abf7da51405556c9ab7f0d41ce00bfc09fba86f6e4daa3ea6bfaa1703b1a

  • SHA512

    c18c8325d263ad653fcfafa679845c16f08de6a951fb096b54f5e857a4523f879ad3ff7b012ea69b7c53ba6ca57c60046f5d97bf7f0042a1ba4ec3a7ba686ba3

  • SSDEEP

    98304:xqev/n6hvOfpQ1pdn3NieLTU/qSBqIQ8hYVcYjXPpdf865H2X0:xJ/AmfpQ1pdnTTUZqIVhY9fpdfJ2X0

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • source.zip
    .zip
  • source/CBV Source/injector/DriverIN.sys
    .sys windows:10 windows x64 arch:x64

    7ea60585cbdcab90bf2000c9685f3bed


    Headers

    Imports

    Sections

  • source/CBV Source/injector/README.txt
  • source/CBV Source/injector/injector.exe
    .exe windows:6 windows x64 arch:x64

    68c681daabe14035f9fee507ba14565c


    Headers

    Imports

    Sections

  • source/CBV Source/src/core.cpp
  • source/CBV Source/src/core.h
  • source/CBV Source/src/dllmain.cpp
  • source/CBV Source/src/imgui/imconfig.h
  • source/CBV Source/src/imgui/imgui_impl_dx11.cpp
  • source/CBV Source/src/imgui/imgui_impl_dx11.h
  • source/CBV Source/src/imgui/stb_rect_pack.h
    .vbs
  • source/CBV Source/src/imgui/stb_textedit.h
  • source/CBV Source/src/minhook/MinHook.h
  • source/CBV Source/src/minhook/minhook.lib
  • source/CBV Source/src/offsets.cpp
  • source/CBV Source/src/offsets.h
  • source/CBV Source/src/render.cpp
  • source/CBV Source/src/render.h
  • source/CBV Source/src/retspoof.asm
  • source/CBV Source/src/settings.cpp
  • source/CBV Source/src/settings.h
  • source/CBV Source/src/stdafx.h
  • source/CBV Source/src/structs.h
  • source/CBV Source/src/util.cpp
  • source/CBV Source/src/util.h
  • source/CBV Source/src/x64/Release/Fortnite.lib
  • source/CBV Source/src/xorstr.h