General

  • Target
    FortniteClient-Win64-Shipping.exe
  • Size 172.3MB
  • Sample260716-2p23dsaz2x
  • SHA256 fa6d1bd8cf09219753285a8e3e79b78156c7ae792fbb2537a9dca1c3043bd178
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • FortniteClient-Win64-Shipping.exe
    .exe 172.3MB

FortniteClient-Win64-Shipping.exe

  • IMPHASH e1cfe054c68d38fe0f6c5c964f60329e
  • SHA256 fa6d1bd8cf09219753285a8e3e79b78156c7ae792fbb2537a9dca1c3043bd178
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
f2:79:0e:07:7f:10:52:d2:46:f2:fc:55:e2:d2:7d:be:8d:a1:dd:03:a0:54:b3:4c:26:7e:6f:5b:9c:dc:63:2a
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Raleigh,ST=North Carolina,C=US

PE Signature issue

Digest
bb:ce:12:ea:95:70:16:4e:e5:af:0c:d6:fd:cb:59:21:21:77:bc:7e
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Raleigh,ST=North Carolina,C=US
Minor OS version
0
Major OS version
6
Entry point
104346652
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
FortniteClient-Win64-Shipping.pdb