fort int.7z
- SHA256 23cb650111916a91b6eb168bfaa8d1c824e9acd9b198baa01c4c43b2e5be2207
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fort int.7z
Resource
win11-20260513-en
windows11-21h2-x64
17 signatures
150 seconds
General
- Target fort int.7z
- Size 173KB
- Sample260720-nc84aaf12l
- SHA256 23cb650111916a91b6eb168bfaa8d1c824e9acd9b198baa01c4c43b2e5be2207
- MD5 902c3e03549aed86c008e86b36e7cae2
- SHA1 7f787601cb20418a09fa84558539bd16836f86b7
- SHA512 0453d6e7cc25797343d19d8cdaf29851483480727ed2b57b5773af9a27f6f25ce5c2ba25efe7a07bef38b4669f9bec4ba9f24fc0bbcfedd3128fedf6ef0e5b84
- SSDEEP 3072:vufoa4K37YXY6mcFumi7XQ9Cg8DLlTQO1SBa+7WmC7XS40qgUq0xUiM8u:m34K3kI6dFr9yMaGC7ivkx7Lu
- TLSH T1EC04131F98B3739C92252C13D687E1373FB542381ABD28DB5E799E308A8F384594E2D5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/fort int/free int/cheat.dll unpack001/fort int/free int/inj.exe
File Explorer
-
fort int.7z.7z 173KB
-
fort int/free int/cheat.dll.dll 444KB
-
fort int/free int/how to use.txt70B
-
fort int/free int/inj.exe.exe 74KB
fort int/free int/cheat.dll
- IMPHASH b228d1e5b4f9ff85d9bda0018e08fd37
- SHA256 2a769e10586e282dc604a784eae0192def083494afdec72c97ba11d670481890
- MD5 af3c084c3507fc15c2df8b15b55befe6
- SHA1 bcfb95ee40de8f7d28980333d3fda722537e3934
- SHA512 8161fc3fdc0433b65074b555073c638aeb64bb6d4267eb2b044d73608db519eaf34a25904a84420b4b0f680cdb87ed533a8c794f0f324fc4fc0d25e60da69d7d
- SSDEEP 6144:Bak+P3VeHEHu6G8me0EfYAXeWkY0FW4fDU7BTYTS:EZFy0dGuXeWkY0FWdTY
- TLSH T1C0A43C16B3A320B8D432C5B985E37619BD227C054721E9EF0BD05721AE90BD07A7F76B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
283072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\admin\Downloads\Mikeware-Free-Latest\..\ccs-free-fn.pdb
user32
MessageBoxA
SendInput
kernel32
AcquireSRWLockExclusive
Beep
CloseHandle
CompareStringW
CreateFileW
CreateProcessW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesExW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount64
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsBadReadPtr
IsBadWritePtr
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
VirtualProtect
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
Name
.text
Size
347KB
Virtual Size
346KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
78KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
fort int/free int/how to use.txt
- SHA256 ea54ad20eb95c53e634ca83d2d4fdee1128d68c32d312027f65337c37477f9c1
- MD5 d1e266084017cdb55cf26bad85d4f45e
- SHA1 4aa14114f38e46a587a942cc777d7ee4d1de418e
- SHA512 476cafad6c494b33f6919273f168e281af44ae81aa2a0c818b2bc9fd704520a3118e442697634133847b1839926fc898d3b5ad92ad0607c9f61a2da2e9341de9
- TLSH T152A002F67D7F16E3D4E8A6BA8A49A6593F141150782951602920317CEF4298C3984415
- MD5 SHA1 SHA512 TLSH
fort int/free int/inj.exe
- IMPHASH 7cc39faa57b1990ee2028ab2b5d2a3a4
- SHA256 5aad434de7b8325a25f8b75b4c642975dd0ecd6c13d9b3005cc1dc3ef710bb50
- MD5 ac85ca4bcf66af2d508c72a914cea185
- SHA1 105e6999f518e2ba4077ed7a12e71788485fef4e
- SHA512 358a912d1484624156583468cc0dfb04fa5ac295b4a5ff4480c280646ee31c854f9fe0e9c2b5c72847dfe7b09955e75a0cc14c43a1e2737059f4ec0d3d536962
- SSDEEP 1536:1nFyMvqHd6jcagrDGUoZx/ev7r43eo0T619bplRxyualtxKeEQ:BsMvqH8Aask84qT6PbplGlt9E
- TLSH T1F5733A57BB9400E8D171C2B8C8E34E05E7B7B9850731A7DF03A0A25A0F663D5AE3F625
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
26272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\TXZY\Downloads\Injector_[unknowncheats.me]_\x64\Release\injector.pdb
kernel32
SetFileAttributesW
GetFileAttributesW
GetFileAttributesExW
FindFirstFileW
FindClose
GetLocaleInfoEx
FormatMessageA
LocalFree
GetModuleHandleW
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CreateFile2
AreFileApisANSI
CloseHandle
GetLastError
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
user32
MessageBoxW
advapi32
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
shell32
ShellExecuteW
SHCreateDirectoryExW
msvcp140
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Id_cnt@id@locale@std@@0HA
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
memmove
__std_exception_destroy
__std_terminate
__C_specific_handler
_CxxThrowException
__current_exception
__current_exception_context
memset
memcpy
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
system
_initialize_onexit_table
exit
abort
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_seh_filter_exe
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
terminate
_set_app_type
api-ms-win-crt-stdio-l1-1-0
fflush
setvbuf
__p__commode
_set_fmode
_get_stream_buffer_pointers
_fseeki64
fread
fsetpos
ungetc
fclose
fgetpos
fwrite
fgetc
fputc
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
malloc
free
api-ms-win-crt-string-l1-1-0
wcslen
tolower
strlen
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
Name
.text
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=35721,
count=3, id=259, version=35721,
count=10, id=260, version=35721,
count=28, id=261, version=35721,
count=9, id=257, version=35215,
count=185, id=1, productName=Unmarked objects,
count=2, id=264, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,