General

Malware Config

Signatures

Files

• Astro Fortnite Free Loader.exe

  .exe windows:6 windows x64 arch:x64

  2dfe746995e385a0e566175863279535

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  kernel32

  UnmapViewOfFile

  GetSystemTimeAsFileTime

  HeapAlloc

  HeapFree

  ExitProcess

  LoadLibraryA

  GetModuleHandleA

  GetProcAddress

  user32

  MessageBoxA

  advapi32

  CryptHashData

  shell32

  ShellExecuteW

  msvcp140

  ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

  ntdll

  RtlVirtualUnwind

  normaliz

  IdnToAscii

  wldap32

  ord301

  crypt32

  CryptStringToBinaryA

  ws2_32

  ntohl

  shlwapi

  PathFindFileNameW

  rpcrt4

  UuidCreate

  psapi

  GetModuleInformation

  vcruntime140_1

  __CxxFrameHandler4

  vcruntime140

  __std_exception_destroy

  api-ms-win-crt-stdio-l1-1-0

  _read

  api-ms-win-crt-utility-l1-1-0

  qsort

  api-ms-win-crt-string-l1-1-0

  strspn

  api-ms-win-crt-heap-l1-1-0

  malloc

  api-ms-win-crt-runtime-l1-1-0

  terminate

  api-ms-win-crt-convert-l1-1-0

  atoi

  api-ms-win-crt-math-l1-1-0

  __setusermatherr

  api-ms-win-crt-filesystem-l1-1-0

  _stat64

  api-ms-win-crt-locale-l1-1-0

  localeconv

  api-ms-win-crt-environment-l1-1-0

  getenv

  api-ms-win-crt-time-l1-1-0

  _time64

  Sections

  .text

  Size: - Virtual size: 424KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: - Virtual size: 123KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: - Virtual size: 2.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .GGO

  Size: - Virtual size: 7.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .0&4

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .AyY

  Size: 14.4MB - Virtual size: 14.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 296B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ