059820ca892d239d6146101bf2a460340fb9b9c7b3b6d5092f26a820e8d0d8f6

Sharing

Copy URL

Twitter E-mail

General

Target

059820ca892d239d6146101bf2a460340fb9b9c7b3b6d5092f26a820e8d0d8f6
Size

147KB
MD5

577ec6b298ca7eedc4f3ef5140d3177d
SHA1

11ad3d415d1909c105cbd041831bc2a479a074b7
SHA256

059820ca892d239d6146101bf2a460340fb9b9c7b3b6d5092f26a820e8d0d8f6
SHA512

ca41d26057d8bfeb63d45a8783cec41471b3a7e0fa9d31e76ed168ab2b5952af901a30020cec92a8c4b9f0f7964bcefc37f7e1cb9482a25355265e91de0cc3db
SSDEEP

3072:EI71lBxAIgxq5csSI6+2PtSJ6By2XaBP1ZlaV75:0qOsPJcXcRaV75

Score

N/A

Malware Config

Signatures

Files

059820ca892d239d6146101bf2a460340fb9b9c7b3b6d5092f26a820e8d0d8f6
.dll windows x86

a802b0cc3abbb3800b95cc70e5049d1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

core

?CallFunction@UObject@@UAEXAAUFFrame@@QAXPAVUFunction@@@Z
?Add@FArray@@QAEHHH@Z
?InitExecution@UObject@@UAEXXZ
?GError@@3PAVFOutputDeviceError@@A
?GotoLabel@UObject@@UAEHVFName@@@Z
?GotoState@UObject@@UAE?AW4EGotoState@@VFName@@@Z
?PostLoad@UObject@@UAEXXZ
??0FName@@QAE@PB_WW4EFindName@@@Z
?Modify@UObject@@UAEXXZ
??1FCriticalSection@@QAE@XZ
?ProcessRemoteFunction@UObject@@UAEHPAVUFunction@@PAXPAUFFrame@@@Z
?ProcessState@UObject@@UAEXM@Z
?ProcessDelegate@UObject@@UAEXVFName@@PAUFScriptDelegate@@PAX2@Z
?ProcessEvent@UObject@@UAEXPAVUFunction@@PAX1@Z
?Release@UObject@@UAGKXZ
?AddRef@UObject@@UAGKXZ
?QueryInterface@UObject@@UAGKABVFGuid@@PAPAX@Z
??1FString@@QAE@XZ
?appFailAssert@@YAXPBD0H@Z
??4FString@@QAEAAV0@ABV0@@Z
?IsLoaded@UObject@@UAEHXZ
??0FString@@QAE@ABV0@@Z
?Tick@USubsystem@@UAEXM@Z
?Rename@UObject@@UAEXPB_WPAV1@@Z
?ConditionalDestroy@UObject@@QAEHXZ
?NetDirty@UObject@@UAEXPAVUProperty@@@Z
??0FArray@@IAE@HH@Z
?OnEvent@UObject@@UAEXABVFString@@0@Z
??1FArray@@QAE@XZ
?Remove@FArray@@QAEXHHH@Z
?StaticAllocateObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@11@Z
?ClearL2Game@UObject@@UAEXXZ
?LanguageChange@UObject@@UAEXXZ
?IsPendingKill@UObject@@UAEHXZ
?Register@UObject@@UAEXXZ
?Empty@FArray@@QAEXHH@Z
?ScriptConsoleExec@UObject@@UAEHPB_WAAVFOutputDevice@@PAV1@@Z
?GMalloc@@3PAVFMalloc@@A
?GConfig@@3PAVFConfigCache@@A
??0UClass@@QAE@W4ENativeConstructor@@KKPAV0@1VFGuid@@PB_W33KP6AXPAX@ZP8UObject@@AEXXZ@Z
?IsValid@UObject@@QAEHXZ
??0UIntProperty@@QAE@W4ECppProperty@@HPB_WK@Z
?GetPathName@UObject@@QBEPB_WPAV1@PA_W@Z
??1UIntProperty@@UAE@XZ
?CopyCompleteValue@UIntProperty@@UBEXPAX0PAVUObject@@@Z
?GFileStream@@3PAVFFileStream@@A
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?CopySingleValue@UBoolProperty@@UBEXPAX0PAVUObject@@@Z
?CopySingleValue@UIntProperty@@UBEXPAX0PAVUObject@@@Z
?DestroyStream@FFileStream@@QAEXHH@Z
?CopyCompleteValue@UFloatProperty@@UBEXPAX0PAVUObject@@@Z
??3UIntProperty@@SAXPAXPAVUObject@@PB_WK@Z
?ImportText@UBoolProperty@@UBEPB_WPB_WPAEHH@Z
?ImportText@UIntProperty@@UBEPB_WPB_WPAEHH@Z
?QueryStream@FFileStream@@QAEHHAAH@Z
?StaticLoadObject@UObject@@SAPAV1@PAVUClass@@PAV1@PB_W2KPAVUPackageMap@@@Z
?CopySingleValue@UFloatProperty@@UBEXPAX0PAVUObject@@@Z
?appSqrt@@YANN@Z
?appStrfind@@YAPB_WPB_W0@Z
??3UIntProperty@@SAXPAX@Z
?GAudioDefaultRadius@@3MA
?ExportTextItem@UBoolProperty@@UBEXAAVFString@@PAE1H@Z
?ExportTextItem@UIntProperty@@UBEXAAVFString@@PAE1H@Z
?RequestChunks@FFileStream@@QAEXHHPAX@Z
?StaticFindObject@UObject@@SAPAV1@PAVUClass@@PAV1@PB_WH@Z
?ImportText@UFloatProperty@@UBEPB_WPB_WPAEHH@Z
?GIsEditor@@3HA
?ExportCppItem@UBoolProperty@@UBEXAAVFOutputDevice@@H@Z
?ExportCppItem@UIntProperty@@UBEXAAVFOutputDevice@@H@Z
?CreateStream@FFileStream@@QAEHPB_WHHPAXW4EFileStreamType@@1@Z
?ExportTextItem@UFloatProperty@@UBEXAAVFString@@PAE1H@Z
??KFVector@@QBE?AV0@M@Z
??2UIntProperty@@SAPAXIPAVUObject@@PB_WK@Z
?NetSerializeItem@UBoolProperty@@UBEHAAVFArchive@@PAVUPackageMap@@PAX@Z
?appStrcmp@@YAHPB_W0@Z
?NetSerializeItem@UIntProperty@@UBEHAAVFArchive@@PAVUPackageMap@@PAX@Z
??9FString@@QBEHPB_W@Z
?GetPropertiesSize@UField@@UAEHXZ
?GObjObjects@UObject@@1V?$TArray@PAVUObject@@@@A
?ExportCppItem@UFloatProperty@@UBEXAAVFOutputDevice@@H@Z
?appUnwindf@@YAXPB_WZZ
??1UClass@@UAE@XZ
?SerializeItem@UBoolProperty@@UBEXAAVFArchive@@PAXH@Z
?SerializeItem@UIntProperty@@UBEXAAVFArchive@@PAXH@Z
?PostEditChange@UObject@@UAEXXZ
?GetOwnerClass@UField@@UAEPAVUClass@@XZ
?NetSerializeItem@UFloatProperty@@UBEHAAVFArchive@@PAVUPackageMap@@PAX@Z
?Identical@UBoolProperty@@UBEHPBX0@Z
?Identical@UIntProperty@@UBEHPBX0@Z
?ShutdownAfterError@UObject@@UAEXXZ
?Bind@UField@@UAEXXZ
?SerializeItem@UFloatProperty@@UBEXAAVFArchive@@PAXH@Z
?GetID@UProperty@@UBEEXZ
?Link@UBoolProperty@@UAEXAAVFArchive@@PAVUProperty@@@Z
?Link@UIntProperty@@UAEXAAVFArchive@@PAVUProperty@@@Z
?MergeBools@UField@@UAEHXZ
?Identical@UFloatProperty@@UBEHPBX0@Z
?GIsNative@@3HA
?Port@UProperty@@UBEHXZ
?Serialize@UBoolProperty@@UAEXAAVFArchive@@@Z
?AddCppProperty@UField@@UAEXPAVUProperty@@@Z
?Link@UFloatProperty@@UAEXAAVFArchive@@PAVUProperty@@@Z
?appAtof@@YAMPB_W@Z
?DestroyValue@UProperty@@UBEXPAX@Z
??0UFloatProperty@@QAE@W4ECppProperty@@HPB_WK@Z
?Serialize@UObject@@UAEXAAVFArchive@@@Z
?GL2ReplayMode@@3HA
??HFString@@QAE?AV0@ABV0@@Z
?Register@UField@@UAEXXZ
?GCountryCode@@3PA_WA
?CopyCompleteValue@UProperty@@UBEXPAX0PAVUObject@@@Z
?Destroy@UObject@@UAEXXZ
?Logf@FOutputDevice@@QAAXPB_WZZ
?PostLoad@UField@@UAEXXZ
??1UFloatProperty@@UAE@XZ
?appRand@@YAHXZ
?ExportText@UProperty@@UBEHHAAVFString@@PAE1H@Z
??0FVector@@QAE@XZ
?Unlock@FCriticalSection@@QAEXXZ
??3UFloatProperty@@SAXPAXPAVUObject@@PB_WK@Z
?Lock@FCriticalSection@@QAEXXZ
?Printf@FString@@SA?AV1@PB_WZZ
??DFString@@QBEPB_WXZ
?ExportCpp@UProperty@@UBEXAAVFOutputDevice@@HHHH@Z
?appGetDllHandle@@YAPAXPB_W@Z
??3UFloatProperty@@SAXPAX@Z
?Empty@FString@@QAEXXZ
??0FCriticalSection@@QAE@XZ
?appMemset@@YAXPAXHH@Z
?GAudioMaxRadiusMultiplier@@3MA
?CleanupDestroyed@UProperty@@UBEXPAE@Z
??2UFloatProperty@@SAPAXIPAVUObject@@PB_WK@Z
??4FString@@QAEAAV0@PB_W@Z
?Serialize@UProperty@@UAEXAAVFArchive@@@Z
?appFromAnsi@@YAPB_WPBDPA_W@Z
??0FString@@QAE@PB_W@Z
??0UBoolProperty@@QAE@W4ECppProperty@@HPB_WK@Z
?ParseCommand@@YAHPAPB_WPB_W@Z
??0FString@@QAE@XZ
?debugf@@YAXW4EName@@PB_WZZ
??1UBoolProperty@@UAE@XZ
?debugf@@YAXPB_WZZ
?appStrcpy@@YAPA_WPA_WPB_W@Z
??3UBoolProperty@@SAXPAXPAVUObject@@PB_WK@Z
?PrivateStaticClass@UObject@@0VUClass@@A
?GLanguageType@@3HA
??3UBoolProperty@@SAXPAX@Z
?StaticConfigName@UObject@@SAPB_WXZ
?appGetDllExport@@YAPAXPAXPB_W@Z
?Normalize@FVector@@QAEHXZ
??2UBoolProperty@@SAPAXIPAVUObject@@PB_WK@Z
?appFreeDllHandle@@YAXPAX@Z
?appSecondsQPC@@YANXZ
?Size@FVector@@QBEMXZ
?AddZeroed@FArray@@QAEHHH@Z

engine

??4UAudioSubsystem@@QAEAAV0@ABV0@@Z
??0UAudioSubsystem@@QAE@ABV0@@Z
?CleanUp@UAudioSubsystem@@UAEXXZ
??1UAudioSubsystem@@UAE@XZ
?PS2Convert@USound@@UAEXXZ
?IsPlayedUntilEnd@USound@@QAEHXZ
?GStats@@3VFStats@@A
?Audio@USound@@2PAVUAudioSubsystem@@A
?GetDuration@USound@@UAEMXZ
??0USound@@QAE@PB_WH@Z
??1USound@@UAE@XZ
??3USound@@SAXPAXPAVUObject@@PB_WK@Z
?GetZonePlayState@UAmbientSoundObject@@QAEHXZ
??3USound@@SAXPAX@Z
??0UAudioSubsystem@@IAE@XZ
??2USound@@SAPAXIPAVUObject@@PB_WK@Z
?GetCurZoneRenderState@AZoneInfo@@QAEHXZ
?PrivateStaticClass@USound@@0VUClass@@A
?IsSaveState@FL2ReplayManager@@QAEHXZ
?AddMusicName@FL2ReplayManager@@QAEXABVFString@@H@Z
?PrivateStaticClass@ALineagePlayerController@@0VUClass@@A
?PrivateStaticClass@UAmbientSoundObject@@0VUClass@@A
?ReadWaveInfo@FWaveModInfo@@QAEHAAV?$TArray@E@@@Z
?PointRegion@UModel@@QBE?AUFPointRegion@@PAVAZoneInfo@@VFVector@@@Z
?PrivateStaticClass@UMasterLevel@@0VUClass@@A
?IsSoundNight@UL2NEnvManager@@QAEHXZ
?PostLoad@USound@@UAEXXZ
?L2GetPhysicsVolume@ALevelInfo@@QAEPAVAPhysicsVolume@@VFVector@@PAVAActor@@H@Z
?IsSoundDay@UL2NEnvManager@@QAEHXZ
?Destroy@USound@@UAEXXZ
?RegisterStats@FStats@@QAEHW4EStatsType@@W4EStatsDataType@@VFString@@2W4EStatsUnit@@@Z
?Serialize@USound@@UAEXAAVFArchive@@@Z
?PrivateStaticClass@UAudioSubsystem@@0VUClass@@A

vorbisfile

ov_pcm_total
ov_info
ov_time_total

kernel32

GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlUnwind
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
VirtualAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
RaiseException

Exports

Exports

??0UALAudioSubsystem@@QAE@ABV0@@Z
??0UALAudioSubsystem@@QAE@XZ
??1UALAudioSubsystem@@UAE@XZ
??2UALAudioSubsystem@@SAPAXIPAVUObject@@PB_WK@Z
??2UALAudioSubsystem@@SAPAXIPAW4EInternal@@@Z
??3UALAudioSubsystem@@SAXPAX@Z
??3UALAudioSubsystem@@SAXPAXPAVUObject@@@Z
??3UALAudioSubsystem@@SAXPAXPAVUObject@@PB_W@Z
??3UALAudioSubsystem@@SAXPAXPAVUObject@@PB_WK@Z
??3UALAudioSubsystem@@SAXPAXPAW4EInternal@@@Z
??4UALAudioSubsystem@@QAEAAV0@ABV0@@Z
??_7UALAudioSubsystem@@6BFExec@@@
??_7UALAudioSubsystem@@6BUObject@@@
?ChangeVoiceChatter@UALAudioSubsystem@@UAEXKKH@Z
?CheckSoundResource@UALAudioSubsystem@@UAEHPAVUSound@@@Z
?Destroy@UALAudioSubsystem@@UAEXXZ
?EnterVoiceChat@UALAudioSubsystem@@UAEXXZ
?Exec@UALAudioSubsystem@@UAEHPB_WAAVFOutputDevice@@@Z
?FindExt@UALAudioSubsystem@@QAEHPB_W@Z
?FindProc@UALAudioSubsystem@@QAEXAAPAXPAD1AAHH@Z
?FindProcs@UALAudioSubsystem@@QAEXH@Z
?GetMusicVolume@UALAudioSubsystem@@UAEMXZ
?GetNewStream@UALAudioSubsystem@@AAEHXZ
?GetOggVoiceVolume@UALAudioSubsystem@@UAEMXZ
?GetSoundVolume@UALAudioSubsystem@@UAEMXZ
?GetViewport@UALAudioSubsystem@@UAEPAVUViewport@@XZ
?GetWavVoiceVolume@UALAudioSubsystem@@UAEMXZ
?Init@UALAudioSubsystem@@UAEHXZ
?InternalConstructor@UALAudioSubsystem@@SAXPAX@Z
?IsMusicPlaying@UALAudioSubsystem@@UAEHXZ
?IsOggVoicePlaying@UALAudioSubsystem@@UAEHXZ
?IsPlaying@UALAudioSubsystem@@UAEHPAVAActor@@PAVUSound@@@Z
?IsPlayingInZone@UALAudioSubsystem@@AAE_NPAVULevel@@PAVUAmbientSoundObject@@@Z
?IsUseZoneState@UALAudioSubsystem@@AAE_NPAVULevel@@PAVUAmbientSoundObject@@@Z
?IsVaild@UALAudioSubsystem@@UAEHXZ
?IsValidGetStream@UALAudioSubsystem@@UAEHXZ
?IsVoiceEnd@UALAudioSubsystem@@UAEHXZ
?IsWavVoicePlaying@UALAudioSubsystem@@UAEHXZ
?LeaveVoiceChat@UALAudioSubsystem@@UAEXXZ
?LowQualitySound@UALAudioSubsystem@@UAEHXZ
?NoteDestroy@UALAudioSubsystem@@UAEXPAVAActor@@@Z
?NoteDestroy@UALAudioSubsystem@@UAEXPAVULevelObject@@@Z
?PlayMusic@UALAudioSubsystem@@UAEHABVFString@@MHHMHH@Z
?PlayPrevMusic@UALAudioSubsystem@@UAEXMHHMH@Z
?PlaySoundW@UALAudioSubsystem@@UAEHPAVAActor@@HPAVUSound@@VFVector@@MMMHMMH@Z
?PlaySoundW@UALAudioSubsystem@@UAEHPAVAActor@@HPAVUSound@@VFVector@@MMMHMMMMMH@Z
?PlaySoundW@UALAudioSubsystem@@UAEHPAVUSound@@PAVULevelObject@@HVFVector@@MMMHMMH@Z
?PlayVoice@UALAudioSubsystem@@UAEHVFString@@MHHH@Z
?PostEditChange@UALAudioSubsystem@@UAEXXZ
?PrivateStaticClass@UALAudioSubsystem@@0VUClass@@A
?RegisterSound@UALAudioSubsystem@@UAEXPAVUSound@@@Z
?SeeIfAnyNewAmbientSoundsNeedToBeStarted@UALAudioSubsystem@@QAEXHPAVULevel@@ABVFVector@@HN@Z
?Serialize@UALAudioSubsystem@@UAEXAAVFArchive@@@Z
?SetI3DL2Listener@UALAudioSubsystem@@AAEXPAVUI3DL2Listener@@@Z
?SetMusicVolume@UALAudioSubsystem@@UAEXHMM@Z
?SetMusicVolume@UALAudioSubsystem@@UAEXM@Z
?SetOggVoiceVolume@UALAudioSubsystem@@UAEXM@Z
?SetSoundVolume@UALAudioSubsystem@@UAEXM@Z
?SetViewport@UALAudioSubsystem@@UAEXPAVUViewport@@@Z
?SetVolumes@UALAudioSubsystem@@AAEXXZ
?SetWavVoiceVolume@UALAudioSubsystem@@UAEXM@Z
?ShutdownAfterError@UALAudioSubsystem@@UAEXXZ
?SoundPriority@UALAudioSubsystem@@AAEMPAVUViewport@@VFVector@@MMH@Z
?StaticClass@UALAudioSubsystem@@SAPAVUClass@@XZ
?StaticConstructor@UALAudioSubsystem@@QAEXXZ
?StopAllMusic@UALAudioSubsystem@@UAEHMH@Z
?StopAllPlayingSound@UALAudioSubsystem@@UAEHH@Z
?StopAllVoice@UALAudioSubsystem@@UAEHMH@Z
?StopMusic@UALAudioSubsystem@@UAEHHMH@Z
?StopSound@UALAudioSubsystem@@AAEXHM@Z
?StopSound@UALAudioSubsystem@@UAEHPAVAActor@@PAVUSound@@M@Z
?StopSound@UALAudioSubsystem@@UAEHPAVUSound@@PAVULevelObject@@M@Z
?UnregisterSound@UALAudioSubsystem@@UAEXPAVUSound@@@Z
?Update@UALAudioSubsystem@@UAEXPAVFSceneNode@@@Z
?UpdateAllPlayingAmbientSounds@UALAudioSubsystem@@QAEXABVFVector@@HPAVUEngine@@@Z
?UpdateAmbientSounds@UALAudioSubsystem@@AAEXAAV?$TArray@UALAmbient@@@@PAVUAmbientSoundObject@@PAVULevel@@AAVFVector@@@Z
?UpdateAmbientSounds@UALAudioSubsystem@@AAEXAAV?$TArray@UALAmbient@@@@PAVULevel@@ABVFVector@@H@Z
?UpdateIfSourceHasActor@UALAudioSubsystem@@QAEXHAAVFVector@@ABV2@@Z
?UpdateIfSourceHasLevelObject@UALAudioSubsystem@@QAEXH@Z
?UpdateStreamingSounds@UALAudioSubsystem@@QAEXH@Z
?alError@UALAudioSubsystem@@AAEHPA_WH@Z
GPackage
_DllMain@12
autoclassUALAudioSubsystem

Sections

.text
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a802b0cc3abbb3800b95cc70e5049d1d

Headers

File Characteristics

Imports

core

engine

vorbisfile

kernel32

Exports

Exports

Sections

.text Size: 83KB - Virtual size: 83KB

.rdata Size: 42KB - Virtual size: 41KB

.data Size: 9KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 504B

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 83KB - Virtual size: 83KB

.rdata
Size: 42KB - Virtual size: 41KB

.data
Size: 9KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 504B

.reloc
Size: 11KB - Virtual size: 10KB