dogmanfortnite[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dogmanfortnite.exe
Size 410KB
Sample261113-kv5xsshx21
SHA256 4e4e8e82b12d7ee43eb4ac12e2a001e28947c7c150b6440385cd92e9d557f758
MD5 530969614b9040b01f3b53a036f2f9ad
SHA1 7c77c5d05e5e2af1e79fba080f20db337586eac2
SHA512 6df2de04e24aec544a4812e3c67c711873093cadcac855e8d3aa102b43fce27a4e2924b369355132be1821d95e2ab25db27909094b5d740b6c8ef9b40639ef66
SSDEEP 6144:/bKbGSluQc9lNPX6J9wSsa8+5HCm3k46f8jUamF9cnvplUO2R:/+GkJ9IIU4iiCdJ
TLSH
T1BC948E58EFA408F6D5B7813CCDA38506EB72BC9A476297CB13945A662F233D05E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dogmanfortnite.exe

File Explorer

dogmanfortnite.exe

.exe 410KB

dogmanfortnite.exe

IMPHASH 0a9bcdda162e51cf42d0d24ff68246cd
SHA256 4e4e8e82b12d7ee43eb4ac12e2a001e28947c7c150b6440385cd92e9d557f758
MD5 530969614b9040b01f3b53a036f2f9ad
SHA1 7c77c5d05e5e2af1e79fba080f20db337586eac2
SHA512 6df2de04e24aec544a4812e3c67c711873093cadcac855e8d3aa102b43fce27a4e2924b369355132be1821d95e2ab25db27909094b5d740b6c8ef9b40639ef66
SSDEEP 6144:/bKbGSluQc9lNPX6J9wSsa8+5HCm3k46f8jUamF9cnvplUO2R:/+GkJ9IIU4iiCdJ
TLSH
T1BC948E58EFA408F6D5B7813CCDA38506EB72BC9A476297CB13945A662F233D05E3E710
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

57824

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

advapi32

RegSetValueExW RegCreateKeyExW RegCloseKey RegOpenKeyExW

shell32

SHCreateDirectoryExW

winhttp

WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData WinHttpQueryHeaders WinHttpOpen WinHttpReceiveResponse

kernel32

SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadFile ReadConsoleW PeekConsoleInputA ReadConsoleInputW GetNumberOfConsoleInputEvents CreateFileW GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation WriteProcessMemory GetConsoleScreenBufferInfo GetStdHandle SetConsoleMode GetModuleFileNameW WaitForSingleObject GetFileAttributesW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot MultiByteToWideChar GetExitCodeThread Sleep GetConsoleMode GetLastError Process32NextW FillConsoleOutputCharacterW Process32FirstW CloseHandle FillConsoleOutputAttribute GetProcAddress VirtualAllocEx MoveFileExW GetModuleHandleW CreateRemoteThread VirtualFreeEx SetConsoleCursorPosition SetConsoleTitleW EnterCriticalSection LeaveCriticalSection DeleteCriticalSection VirtualProtect EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFullPathNameW SetFileInformationByHandle CreateFile2 AreFileApisANSI GetFileInformationByHandleEx WideCharToMultiByte QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive GetCurrentThreadId InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree GetCurrentProcess ExitProcess TerminateProcess FreeLibrary GetModuleHandleExW GetConsoleCP IsProcessorFeaturePresent WriteFile GetCommandLineA GetCommandLineW IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetFileType HeapAlloc HeapFree LoadLibraryExW GetDateFormatW

ntdll

RtlUnwindEx RtlPcToFileHeader RtlCaptureContext RtlVirtualUnwind RtlUnwind RtlLookupFunctionEntry

Name

.text

Size

212KB

Virtual Size

212KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

152KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

29KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

dogmanfortnite.exe

advapi32

shell32

winhttp

kernel32

ntdll

generic