nice_dll_you_got_there[.]dll

General

Target
nice_dll_you_got_there.dll
Size 475KB
Sample260706-pfdl8aez41
SHA256 6110f6f8195d68919a58adea1a52b1983edc07e4c4039573a3b1ba6a5c799ff0
MD5 baa2bac7a4f6f53105c0442854d36d59
SHA1 5d11a451a30794710cf5ec5f954e88cf629804d4
SHA512 f73b61f86530d688925ff69f6f7ed2dff40a3599e793140929fa7e3e52afca039b65cb4da5c28e78e8f192f8574dcba784ba73c74d801077f810f3944c517b9b
SSDEEP 6144:PwjMAnJxfYrX7UlALLGSYHM57+vgGwKr5t72wMbAfrHjm0YhttffA:PwjMAnzfYDQCaS7+vkKFta6bjRYDRI
TLSH
T110A49E16B6B500F9D177D07CCAA34A02EA727C560760DBCF03909A7A2F677E09A7E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
nice_dll_you_got_there.dll

File Explorer

nice_dll_you_got_there.dll

.dll 475KB

nice_dll_you_got_there.dll

IMPHASH 38e500d179f08621164281eb7a96dafa
SHA256 6110f6f8195d68919a58adea1a52b1983edc07e4c4039573a3b1ba6a5c799ff0
MD5 baa2bac7a4f6f53105c0442854d36d59
SHA1 5d11a451a30794710cf5ec5f954e88cf629804d4
SHA512 f73b61f86530d688925ff69f6f7ed2dff40a3599e793140929fa7e3e52afca039b65cb4da5c28e78e8f192f8574dcba784ba73c74d801077f810f3944c517b9b
SSDEEP 6144:PwjMAnJxfYrX7UlALLGSYHM57+vgGwKr5t72wMbAfrHjm0YhttffA:PwjMAnzfYDQCaS7+vkKFta6bjRYDRI
TLSH
T110A49E16B6B500F9D177D07CCAA34A02EA727C560760DBCF03909A7A2F677E09A7E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

160816

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Downloads\fortnite internal\Fortnite-cheat-source-internal-self-leak-main\x64\Release\nice_dll_you_got_there.pdb

kernel32

EnterCriticalSection LeaveCriticalSection InitializeCriticalSection GetLastError LoadLibraryW GetProcAddress DeleteCriticalSection K32GetModuleInformation WriteConsoleW SetEndOfFile HeapSize SetStdHandle CreateFileW GetProcessHeap SetEnvironmentVariableW GetCurrentProcess AllocConsole GetModuleHandleW FreeLibrary IsBadWritePtr MultiByteToWideChar GetStringTypeW WideCharToMultiByte InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree ExitProcess TerminateProcess GetModuleHandleExW IsProcessorFeaturePresent GetModuleFileNameW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc FindClose FindFirstFileExW FindNextFileW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RtlUnwind

user32

GetCursorPos FillRect SetRect MessageBoxA FindWindowA ScreenToClient

gdi32

DeleteObject CreateSolidBrush GetCurrentObject GetObjectW

Name

.text

Size

313KB

Virtual Size

312KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

121KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

nice_dll_you_got_there.dll

kernel32

user32

gdi32

generic