ZZeroDelayFortnite[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ZZeroDelayFortnite.exe
Size

695KB
MD5

16fcc80faa7254086cd6be379ec49e66
SHA1

65f5cc2d86dfc1b3957b15d0e775b224dd6eace9
SHA256

fa205f879a21f5cbd397a8b01455b72c7aa9bccbd627d8a5de05df184cd2c27c
SHA512

7f3e1209ccf2dfe8f34e2ed0671e36727020e56120a311ed33e0e899503cdf10775c0ddb4a33e606857cb16f33c51971df38619887292588dbaabffc7940d6d1
SSDEEP

1536:q5eNVY1y7E98juzQbBgy9nk+EP/kBBBo7E98juzQbBgy9nk+EP/S:S0F0Br0BS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZZeroDelayFortnite.exe

Files

ZZeroDelayFortnite.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\ponos\projects\c#\ZZeroDelay\ZZeroDelayFortnite\obj\Release\ZZeroDelayFortnite.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 254KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ