Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Static task
static1
Behavioral task
behavioral1
Sample
UnrealPak.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
UnrealPak.exe
Resource
win10v2004-20230220-en
Target
UnrealPak.exe
Size
134KB
MD5
ce393738212647abd47717d70d80e99f
SHA1
f4086e61b3bfef8c8b8e3157f8d1662619cb65d7
SHA256
83d40eb798a47f411a8d95bf2862eb6ee71eb36712910b0c4271c2b8a2e0a902
SHA512
d5bf34a525ac05f5af9b12d76063172d9f9ef17b944e1bede36ee2aea1dd0508b7d65b27e99f9ca8a669dc060eec6df5b731d9a253ef2ae1ad9a24c10a13f6bf
SSDEEP
3072:5CZQ4TRr6op4vz4Qhp1d/0xLPuPZ7ne5dJUf7zjeNt:5Cy4TV3674Qhp70o3/jeNt
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?SetupTLSCachesOnCurrentThread@FMemory@@SAXXZ
?EnablePurgatoryTests@FMemory@@SAXXZ
?EnablePoisonTests@FMemory@@SAXXZ
?SRandInit@FGenericPlatformMath@@SAXH@Z
?GetChangelist@FEngineVersionBase@@QEBAIXZ
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?Strnicmp@FGenericPlatformStricmp@@SAHPEB_W0_K@Z
?Memcpy@FGenericPlatformString@@CAPEAXPEAXPEBX_K@Z
?FromCStringWide@FToBoolHelper@@SA_NPEB_W@Z
?RunAndClearDelayedAutoRegisterDelegates@FDelayedAutoRegisterHelper@@SAXW4EDelayedRegisterRunPhase@@@Z
??0FString@@QEAA@XZ
??0FString@@QEAA@$$QEAV0@@Z
??0FString@@QEAA@AEBV0@@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
?AppendChars@FString@@QEAAXPEB_WH@Z
?PathAppend@FString@@QEAAXPEB_WH@Z
?Split@FString@@QEBA_NAEBV1@PEAV1@1W4Type@ESearchCase@@W42ESearchDir@@@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?StartsWith@FString@@QEBA_NPEB_WW4Type@ESearchCase@@@Z
?EndsWith@FString@@QEBA_NPEB_WW4Type@ESearchCase@@@Z
?TrimStartAndEndInline@FString@@QEAAXXZ
?TrimStartAndEnd@FString@@QEGBA?AV1@XZ
?TrimStartInline@FString@@QEAAXXZ
?TrimStart@FString@@QEHAA?AV1@XZ
?ParseIntoArray@FString@@QEBAHAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@PEB_W_N@Z
?Replace@FString@@QEGBA?AV1@PEB_W0W4Type@ESearchCase@@@Z
??1FString@@QEAA@XZ
?GetTypeHash@@YAIUFNameEntryId@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?Value@FParse@@SA_NPEB_W0AEAVFString@@_N@Z
?Token@FParse@@SA_NAEAPEB_WAEAVFString@@_N@Z
?Token@FParse@@SA?AVFString@@AEAPEB_W_N@Z
?Param@FParse@@SA_NPEB_W0@Z
?MemmoveBitsWordOrder@FBitArrayMemory@@SAXPEAIHPEBIHI@Z
?CreateColorMap@FColorList@@QEAAXXZ
?Logf_InternalImpl@FMsg@@CAXPEBDHAEBVFName@@W4Type@ELogVerbosity@@PEB_WZZ
?GetGlobalLogSingleton@@YAPEAVFOutputDeviceRedirector@@XZ
??0FScopedBootTiming@@QEAA@PEBD@Z
??1FScopedBootTiming@@QEAA@XZ
?RequestEngineExit@@YAXPEB_W@Z
?IsInActualRenderingThread@@YA_NXZ
?SetEmitDrawEvents@@YAX_N@Z
?GenerateNewID@FDelegateHandle@@CA_KXZ
?BeginPreInitTextLocalization@@YAXXZ
?BeginInitTextLocalization@@YAXXZ
?InitEngineTextLocalization@@YAXXZ
?InitGameTextLocalization@@YAXXZ
??0FTextFormat@@QEAA@AEBVFText@@@Z
??1FTextFormat@@QEAA@XZ
??0FTextFormat@@QEAA@$$QEAV0@@Z
??0FText@@QEAA@AEBV0@@Z
??0FText@@QEAA@$$QEAV0@@Z
?FromString@FText@@SA?AV1@AEBVFString@@@Z
?FromString@FText@@SA?AV1@$$QEAVFString@@@Z
?Format@FText@@SA?AV1@VFTextFormat@@$$QEAV?$TArray@VFFormatArgumentValue@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
??1FText@@QEAA@XZ
??0FFormatArgumentValue@@QEAA@$$QEAVFText@@@Z
??1FFormatArgumentValue@@QEAA@XZ
??0FFormatArgumentValue@@QEAA@AEBV0@@Z
?TearDown@FInternationalization@@SAXXZ
?ForUseOnlyByLocMacroAndGraphNodeTextLiterals_CreateText@FInternationalization@@SA?AVFText@@PEB_W00@Z
?ToString@FDateTime@@QEBA?AVFString@@XZ
?Now@FDateTime@@SA?AU1@XZ
?Init@FGenericPlatformStackWalk@@SAXXZ
?SetupOutputDevices@FGenericPlatformOutputDevices@@SAXXZ
?GetFeedbackContext@FGenericPlatformOutputDevices@@SAPEAVFFeedbackContext@@XZ
?GetError@FWindowsPlatformOutputDevices@@SAPEAVFOutputDeviceError@@XZ
?OverrideIfEnabled@FMallocFrameProfiler@@SAPEAVFMalloc@@PEAV2@@Z
?Open@FMessageDialog@@SA?AW4Type@EAppReturnType@@W42EAppMsgType@@AEBVFText@@PEBV5@@Z
?Destroy@FSlowTask@@QEAAXXZ
??1FSlowTask@@QEAA@XZ
?Allocate@FQueuedThreadPool@@SAPEAV1@XZ
?Get@IFileManager@@SAAEAV1@XZ
?LoadFileToString@FFileHelper@@SA_NAEAVFString@@PEB_WW4EHashOptions@1@I@Z
?SaveStringToFile@FFileHelper@@SA_NV?$TStringView@_W@@PEB_WW4EEncodingOptions@1@PEAVIFileManager@@I@Z
?Get@FLogSuppressionInterface@@SAAEAV1@XZ
?SupportsMultithreading@FGenericPlatformProcess@@SA_NXZ
?SetThreadAffinityMask@FWindowsPlatformProcess@@SAX_K@Z
?SetCurrentWorkingDirectoryToBaseDir@FWindowsPlatformProcess@@SAXXZ
?GetBinariesSubdirectory@FWindowsPlatformProcess@@SAPEB_WXZ
?Sleep@FWindowsPlatformProcess@@SAXM@Z
?GetSecondsPerCycle@FGenericPlatformTime@@SANXZ
?SetupSingleton@IConsoleManager@@CAXXZ
??0FAutoConsoleVariableSink@@QEAA@AEBV?$TDelegate@$$A6AXXZUFDefaultDelegateUserPolicy@@@@@Z
??1FAutoConsoleVariableSink@@UEAA@XZ
??0FAutoConsoleObject@@IEAA@PEAVIConsoleObject@@@Z
??1FAutoConsoleObject@@MEAA@XZ
??0FAutoConsoleVariableRef@@QEAA@PEB_WAEAH0I@Z
??1FAutoConsoleVariableRef@@UEAA@XZ
?Get@FPageAllocator@@SAAEAV1@XZ
?LatchProtectedMode@FPageAllocator@@QEAAXXZ
??0FAutoConsoleTaskPriority@@QEAA@PEB_W0W4Type@ENamedThreads@@11@Z
??1FAutoConsoleTaskPriority@@QEAA@XZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Shutdown@FTaskGraphInterface@@SAXXZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?EnterpriseDir@FPaths@@SA?AVFString@@XZ
?RootDir@FPaths@@SA?AVFString@@XZ
?ProjectDir@FPaths@@SA?AVFString@@XZ
?ProjectLogDir@FPaths@@SA?AVFString@@XZ
?IsProjectFilePathSet@FPaths@@SA_NXZ
?GetProjectFilePath@FPaths@@SA?AVFString@@XZ
?SetProjectFilePath@FPaths@@SAXAEBVFString@@@Z
?GetExtension@FPaths@@SA?AVFString@@AEBV2@_N@Z
?GetCleanFilename@FPaths@@SA?AVFString@@$$QEAV2@@Z
?GetBaseFilename@FPaths@@SA?AVFString@@AEBV2@_N@Z
?FileExists@FPaths@@SA_NAEBVFString@@@Z
?DirectoryExists@FPaths@@SA_NAEBVFString@@@Z
?IsRelative@FPaths@@SA_NAEBVFString@@@Z
?NormalizeFilename@FPaths@@SAXAEAVFString@@@Z
?CombineInternal@FPaths@@KAXAEAVFString@@PEAPEB_WH@Z
?GetCleanFilename@FPathViews@@SA?AV?$TStringView@_W@@AEBV2@@Z
??0FConfigFile@@QEAA@XZ
??1FConfigFile@@QEAA@XZ
?GetString@FConfigCacheIni@@QEAA_NPEB_W0AEAVFString@@AEBV2@@Z
?Exit@FConfigCacheIni@@QEAAXXZ
?GetInt@FConfigCacheIni@@QEAA_NPEB_W0AEAHAEBVFString@@@Z
?GetBool@FConfigCacheIni@@QEAA_NPEB_W0AEA_NAEBVFString@@@Z
?InitializeConfigSystem@FConfigCacheIni@@SAXXZ
?LoadExternalIniFile@FConfigCacheIni@@SA_NAEAVFConfigFile@@PEB_W11_N12221@Z
?LoadConsoleVariablesFromINI@FConfigCacheIni@@SAXXZ
?RecordConfigReadsFromIni@@YAXXZ
?FormatLogLine@FOutputDeviceHelper@@SA?AVFString@@W4Type@ELogVerbosity@@AEBVFName@@PEB_WW43ELogTimes@@N@Z
?AddOutputDevice@FOutputDeviceRedirector@@QEAAXPEAVFOutputDevice@@@Z
?Get@FAutomationTestFramework@@SAAEAV1@XZ
?RunSmokeTests@FAutomationTestFramework@@QEAA_NXZ
?Get@FCommandLine@@SAPEB_WXZ
?Set@FCommandLine@@SA_NPEB_W@Z
?Append@FCommandLine@@SAXPEB_W@Z
?AddToSubprocessCommandline@FCommandLine@@SAXPEB_W@Z
?BuildFromArgV@FCommandLine@@SA?AVFString@@PEB_WHQEAPEA_W0@Z
?DeleteOldLogs@FMaintenance@@SAXXZ
?InitializeSession@FApp@@SAXXZ
?SetBenchmarking@FApp@@SAX_N@Z
?SetUseFixedTimeStep@FApp@@SAX_N@Z
?PrintStartupLogMessages@FApp@@SAXXZ
?SetIniFilename@FOutputDeviceConsole@@QEAAXPEB_W@Z
?GetPlatformFile@FPlatformFileManager@@QEAAAEAVIPlatformFile@@XZ
?SetPlatformFile@FPlatformFileManager@@QEAAXAEAVIPlatformFile@@@Z
?GetPlatformFile@FPlatformFileManager@@QEAAPEAVIPlatformFile@@PEB_W@Z
?Get@FPlatformFileManager@@SAAEAV1@XZ
?DefaultConvertToRelativePath@FFileManagerGeneric@@SA?AVFString@@PEB_W@Z
?Initialize@FTraceAuxiliary@@SAXPEB_W@Z
?Current@FEngineVersion@@SAAEBV1@XZ
?Get@FModuleManager@@SAAEAV1@XZ
?AddExtraBinarySearchPaths@FModuleManager@@QEAAXXZ
?UnloadModulesAtShutdown@FModuleManager@@QEAAXXZ
?AddBinariesDirectory@FModuleManager@@QEAAXPEB_W_N@Z
?ForceTick@FEmbeddedCommunication@@SAXHMM@Z
?CanBeUsedOnAnyThread@FOutputDevice@@UEBA_NXZ
?CanBeUsedOnMultipleThreads@FOutputDevice@@UEBA_NXZ
?Dump@FOutputDevice@@UEAAXAEAVFArchive@@@Z
?Flush@FOutputDevice@@UEAAXXZ
?IsMemoryOnly@FOutputDevice@@UEBA_NXZ
?Serialize@FOutputDevice@@UEAAXPEB_WW4Type@ELogVerbosity@@AEBVFName@@N@Z
?TearDown@FOutputDevice@@UEAAXXZ
?GMalloc@@3PEAVFMalloc@@EA
?CRCTable_DEPRECATED@FCrc@@2PAIA
?GColorList@@3VFColorList@@A
?LogInit@@3UFLogCategoryLogInit@@A
?LogExit@@3UFLogCategoryLogExit@@A
?GConfig@@3PEAVFConfigCacheIni@@EA
?GLogConsole@@3PEAVFOutputDeviceConsole@@EA
?GError@@3PEAVFOutputDeviceError@@EA
?GWarn@@3PEAVFFeedbackContext@@EA
?GErrorHist@@3PA_WA
?GIsGameAgnosticExe@@3_NA
?GIsRunningUnattendedScript@@3_NA
?GIsEditor@@3_NA
?GIsBuildMachine@@3_NA
?GIsSilent@@3_NA
?GIsRequestingExit@@3_NA
?GEngineIni@@3VFString@@A
?GGameIni@@3VFString@@A
?GSystemStartTime@@3VFString@@A
?GInputTime@@3_KA
?GFrameNumberRenderThread@@3IA
?GMallocFrameProfilerEnabled@@3_NA
?GThreadPool@@3PEAVFQueuedThreadPool@@EA
?GIOThreadPool@@3PEAVFQueuedThreadPool@@EA
?GBackgroundPriorityThreadPool@@3PEAVFQueuedThreadPool@@EA
?Singleton@IConsoleManager@@0PEAU1@EA
?bUseFixedSeed@FApp@@2_NA
?bIsBenchmarking@FApp@@0_NA
?MiniDumpFilenameW@@3PA_WA
?OnFileOpenedForReadFromPakFile@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXPEB_W0@ZUFDefaultDelegateUserPolicy@@@@A
?OnInit@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXXZUFDefaultDelegateUserPolicy@@@@A
?OnExit@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXXZUFDefaultDelegateUserPolicy@@@@A
?OnPreExit@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXXZUFDefaultDelegateUserPolicy@@@@A
?GatherAdditionalLocResPathsCallback@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXAEAV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@ZUFDefaultDelegateUserPolicy@@@@A
?OnSamplingInput@FCoreDelegates@@2V?$TMulticastDelegate@$$A6AXXZUFDefaultDelegateUserPolicy@@@@A
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEB_WZZ
?CheckVerifyFailedImpl@FDebug@@CAXPEBD0HPEB_WZZ
?ProcessFatalError@FDebug@@SAXXZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?NumberOfWorkerThreadsToSpawn@FWindowsPlatformMisc@@SAHXZ
?NumberOfCores@FWindowsPlatformMisc@@SAHXZ
?RequestExit@FWindowsPlatformMisc@@SAX_N@Z
?SetUTF8Output@FWindowsPlatformMisc@@SAXXZ
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?GetEnvironmentVariable@FWindowsPlatformMisc@@SA?AVFString@@PEB_W@Z
?SetGracefulTerminationHandler@FWindowsPlatformMisc@@SAXXZ
?PlatformInit@FWindowsPlatformMisc@@SAXXZ
?PlatformPreInit@FWindowsPlatformMisc@@SAXXZ
?Init@FWindowsPlatformMemory@@SAXXZ
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?SetShouldPromptForRemoteDebugOnEnsure@FGenericPlatformMisc@@SAX_N@Z
?SetShouldPromptForRemoteDebugging@FGenericPlatformMisc@@SAX_N@Z
?NumberOfIOWorkerThreadsToSpawn@FGenericPlatformMisc@@SAHXZ
??0FOutputDevice@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GPrintLogCategory@@3_NA
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?GPrintLogTimes@@3W4Type@ELogTimes@@A
?GIsGameThreadIdInitialized@@3_NA
?GGameThreadId@@3IA
?Startup@FTaskGraphInterface@@SAXH@Z
?GInternalProjectName@@3PA_WA
?LogPakFile@@3UFLogCategoryLogPakFile@@A
?Get@IProjectManager@@SAAEAV1@XZ
?Get@IPluginManager@@SAAEAV1@XZ
?GetExtension@FProjectDescriptor@@SA?AVFString@@XZ
?ExecuteUnrealPak@@YA_NPEB_W@Z
InitializeSListHead
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
WriteConsoleW
GetFileType
FindFirstFileW
FindClose
GetStdHandle
GetCurrentThreadId
QueryPerformanceCounter
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetCriticalSectionSpinCount
InitializeCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlCaptureContext
__current_exception_context
__std_type_info_destroy_list
__current_exception
_purecall
memcpy
memmove
memset
__C_specific_handler
srand
_set_fmode
__p__commode
fflush
__acrt_iob_func
__stdio_common_vfwprintf
wcsncmp
wcsncpy
logf
__setusermatherr
_get_initial_wide_environment
_initterm
_initterm_e
exit
_execute_onexit_table
_set_app_type
_seh_filter_exe
_initialize_wide_environment
_c_exit
_register_thread_local_exe_atexit_callback
_cexit
_crt_at_quick_exit
_configure_wide_argv
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
__p___wargv
_initialize_onexit_table
__p___argc
_crt_atexit
_register_onexit_function
_exit
_configthreadlocale
_set_new_mode
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ