Behavioral task
behavioral1
Sample
FortniteCheats.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
FortniteCheats.exe
Resource
win10v2004-20250217-en
General
-
Target
FortniteCheats.exe
-
Size
78KB
-
MD5
3a1410c05358304f69bec1fe264f1110
-
SHA1
487c3934165fa6938ee68f671a61d537ad7f7ee6
-
SHA256
926391d7769c2382aa4aab6916cc7eb1d9382ceab1fe95a1d06954a04f9551b4
-
SHA512
7af4c32824031e5e11475be06a24f0e9cef728cd30ee93ba7bc80ed417980f0b70bb0a14dc854fa5f36d0e3bcf3d1087b752b2739c2ce6a9ba2571270b27e374
-
SSDEEP
1536:52WjO8XeEXFh5P7v88wbjNrfxCXhRoKV6+V+bPIC:5Zv5PDwbjNrmAE+TIC
Malware Config
Extracted
discordrat
-
discord_token
MTM0MzMyMTcxNzEyODMwMjYxMg.Gnbgj0.m6ty5CA-xGnWizsQHudUpB84DJ0v1dmeSj5Exk
-
server_id
1343321814318710905
Signatures
-
Discordrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource FortniteCheats.exe
Files
-
FortniteCheats.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ