NEAS[.]3eeb0ec9e64ab1f07f95068cf7a85c50[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3eeb0ec9e64ab1f07f95068cf7a85c50.exe
Size

151KB
MD5

3eeb0ec9e64ab1f07f95068cf7a85c50
SHA1

2d160fc73faeeec152d9a1c295341a00dec0b7db
SHA256

0b8ea8681f2436bc2145da2ccd10916df1e5a72c7360064faf012253c141b270
SHA512

d501d05ef82ce0bf771d2d4b1b661d352456a0139f6a1b01c72a0f2f4b0b17a0b6a276d70574565e027a1347fb22bc2899319d3a707e0189ebf0a397cdd2bebe
SSDEEP

3072:l0Rp/lrzDeTZBkhHdE8KCqZIOO9caMFHt1BWg9RkkBz:l0U8KCqZdRZUmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3eeb0ec9e64ab1f07f95068cf7a85c50.exe

Files

NEAS.3eeb0ec9e64ab1f07f95068cf7a85c50.exe
.dll windows:6 windows x64

18de478adab60f1092dc62d8aa3e230d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-core

??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
??0FString@@QEAA@XZ
?TStatId_NAME_None@TStatId@@0UTStatIdData@@A
?GEngineIni@@3VFString@@A
?GConfig@@3PEAVFConfigCacheIni@@EA
?GIgnoreDebugger@@3_NA
?GetString@FConfigCacheIni@@QEAA_NPEB_W0AEAVFString@@AEBV2@@Z
?LoadModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@W4ELoadModuleFlags@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?Destruct@FLLMScope@@IEAAXXZ
??0FLLMScope@@QEAA@W4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
??1FMemScope@@QEAA@XZ
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
?IsInAudioThread@@YA_NXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?FromValidENamePostInit@FNameEntryId@@CA?AU1@W4EName@@@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
??1FString@@QEAA@XZ
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?ConcatCF@FString@@CA?AV1@PEB_W$$QEAV1@@Z
??0FString@@QEAA@PEB_W@Z
??0FString@@QEAA@PEBD@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??0FString@@QEAA@AEBV0@@Z
??0FString@@QEAA@$$QEAV0@@Z
?Free@FMemory@@SAXPEAX@Z

unrealserver-coreuobject

?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?PostEditImport@UObject@@UEAAXXZ
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?PostDuplicate@UObject@@UEAAX_N@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostCDOContruct@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?StaticConfigName@UObject@@SAPEB_WXZ
?StaticClass@UObject@@SAPEAVUClass@@XZ
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
??0FStaticConstructObjectParameters@@QEAA@PEBVUClass@@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?AssertIfInConstructor@FObjectInitializer@@SAXPEAVUObject@@PEB_W@Z
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?StaticConstructObject_Internal@@YAPEAVUObject@@AEBUFStaticConstructObjectParameters@@@Z
?GetTransientPackage@@YAPEAVUPackage@@XZ
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?FindFunctionChecked@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?IsValid@FWeakObjectPtr@@QEBA_NXZ
??0ICppStructOps@UScriptStruct@@QEAA@HH@Z
??1ICppStructOps@UScriptStruct@@UEAA@XZ
?HasGetTypeHash@ICppStructOps@UScriptStruct@@QEBA_NXZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?Z_Construct_UClass_UObject_NoRegister@@YAPEAVUClass@@XZ
?BeginDestroy@UObject@@UEAAXXZ
?GetDesc@UObject@@UEAA?AVFString@@XZ
?PostLoad@UObject@@UEAAXXZ
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?GetFunctionCallspace@UObject@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?FinishDestroy@UObject@@UEAAXXZ

unrealserver-engine

?GetComponentChildElements@UActorComponent@@UEAAXAEAV?$TArray@UFTypedElementHandle@@V?$TSizedDefaultAllocator@$0CA@@@@@_N@Z
?PostApplyToComponent@UActorComponent@@UEAAXXZ
?GetComponentInstanceData@USceneComponent@@UEBA?AV?$TStructOnScope@UFActorComponentInstanceData@@PEAVUScriptStruct@@@@XZ
?GetReadableName@UActorComponent@@UEBA?AVFString@@XZ
?OnActorEnableCollisionChanged@UActorComponent@@UEAAXXZ
?RequiresPreEndOfFrameSync@UActorComponent@@UEBA_NXZ
?OnComponentCreated@UActorComponent@@UEAAXXZ
?RequiresGameThreadEndOfFrameUpdates@UActorComponent@@UEBA_NXZ
?UpdateComponentToWorld@USceneComponent@@UEAAXW4EUpdateTransformFlags@@W4ETeleportType@@@Z
?InvalidateLightingCacheDetailed@UActorComponent@@UEAAX_N0@Z
?IsComponentTickEnabled@UActorComponent@@UEBA_NXZ
?SetComponentTickEnabledAsync@UActorComponent@@UEAAX_N@Z
?SetComponentTickEnabled@UActorComponent@@UEAAX_N@Z
?AsyncPhysicsTickComponent@UActorComponent@@UEAAXMM@Z
?TickComponent@UActorComponent@@UEAAXMW4ELevelTick@@PEAUFActorComponentTickFunction@@@Z
?UninitializeComponent@UActorComponent@@UEAAXXZ
?BeginPlay@UActorComponent@@UEAAXXZ
?ReadyForReplication@UActorComponent@@UEAAXXZ
?InitializeComponent@UActorComponent@@UEAAXXZ
?RegisterComponentTickFunctions@UActorComponent@@MEAAX_N@Z
?HasValidPhysicsState@UActorComponent@@MEBA_NXZ
?ShouldCreatePhysicsState@UActorComponent@@MEBA_NXZ
?OnDestroyPhysicsState@UActorComponent@@MEAAXXZ
?OnCreatePhysicsState@UActorComponent@@MEAAXXZ
?DestroyRenderState_Concurrent@UActorComponent@@MEAAXXZ
?SendRenderInstanceData_Concurrent@UActorComponent@@MEAAXXZ
?SendRenderDynamicData_Concurrent@UActorComponent@@MEAAXXZ
?SendRenderTransform_Concurrent@UActorComponent@@MEAAXXZ
?CreateRenderState_Concurrent@UActorComponent@@MEAAXPEAVFRegisterComponentContext@@@Z
?ShouldCreateRenderState@USceneComponent@@UEBA_NXZ
?ShouldActivate@UActorComponent@@MEBA_NXZ
?EndReplication@UActorComponent@@UEAAXXZ
?BeginReplication@UActorComponent@@UEAAXXZ
?OnPreEndOfFrameSync@UActorComponent@@UEAAXXZ
?OnEndOfFrameUpdateDuringTick@UActorComponent@@UEAAXXZ
?GetComponentClassCanReplicate@UActorComponent@@UEBA_NXZ
?PreReplication@UActorComponent@@UEAAXAEAVIRepChangedPropertyTracker@@@Z
?GetReplicationCondition@UActorComponent@@UEBA?AW4ELifetimeCondition@@XZ
?ReplicateSubobjects@UActorComponent@@UEAA_NPEAVUActorChannel@@PEAVFOutBunch@@PEAUFReplicationFlags@@@Z
?SetAutoActivate@UActorComponent@@UEAAX_N@Z
?ToggleActive@UActorComponent@@UEAAXXZ
?SetActive@UActorComponent@@UEAAX_N0@Z
?OnRep_IsActive@UActorComponent@@UEAAXXZ
?ValidateGeneratedRepEnums@USceneComponent@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CallRemoteFunction@UActorComponent@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?GetFunctionCallspace@UActorComponent@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?PostRepNotifies@USceneComponent@@UEAAXXZ
?PostNetReceive@USceneComponent@@UEAAXXZ
?PreNetReceive@USceneComponent@@UEAAXXZ
?IsSupportedForNetworking@UActorComponent@@UEBA_NXZ
?IsNameStableForNetworking@UActorComponent@@UEBA_NXZ
?RegisterReplicationFragments@UActorComponent@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetLifetimeReplicatedProps@USceneComponent@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetWorld@UActorComponent@@UEBAPEAVUWorld@@XZ
?Rename@UActorComponent@@UEAA_NPEB_WPEAVUObject@@I@Z
?IsPostLoadThreadSafe@USceneComponent@@UEBA_NXZ
?NeedsLoadForEditorGame@UActorComponent@@UEBA_NXZ
?NeedsLoadForServer@UActorComponent@@UEBA_NXZ
?NeedsLoadForClient@UActorComponent@@UEBA_NXZ
?PostRename@UActorComponent@@UEAAXPEAVUObject@@VFName@@@Z
?PostInterpChange@USceneComponent@@UEAAXPEAVFProperty@@@Z
?PostInitProperties@UActorComponent@@UEAAXXZ
?LogAudio@@3UFLogCategoryLogAudio@@A
?OnComponentDestroyed@USceneComponent@@UEAAX_N@Z
?AddTickPrerequisiteActor@UActorComponent@@UEAAXPEAVAActor@@@Z
?AddTickPrerequisiteComponent@UActorComponent@@UEAAXPEAV1@@Z
?RemoveTickPrerequisiteActor@UActorComponent@@UEAAXPEAVAActor@@@Z
?RemoveTickPrerequisiteComponent@UActorComponent@@UEAAXPEAV1@@Z
?ApplyWorldOffset@USceneComponent@@UEAAXAEBU?$TVector@N@Math@UE@@_N@Z
?IsNavigationRelevant@UActorComponent@@UEBA_NXZ
?IsHLODRelevant@UActorComponent@@UEBA_NXZ
?Tick@UActorComponent@@EEAAXM@Z
?IsSimulatingPhysics@USceneComponent@@UEBA_NVFName@@@Z
?IsAnySimulatingPhysics@USceneComponent@@UEBA_NXZ
?DetachFromParent@USceneComponent@@UEAAX_N0@Z
?DetachFromComponent@USceneComponent@@UEAAXAEBUFDetachmentTransformRules@@@Z
?GetSocketTransform@USceneComponent@@UEBA?AU?$TTransform@N@Math@UE@@VFName@@W4ERelativeTransformSpace@@@Z
?GetSocketLocation@USceneComponent@@UEBA?AU?$TVector@N@Math@UE@@VFName@@@Z
?GetSocketRotation@USceneComponent@@UEBA?AU?$TRotator@N@Math@UE@@VFName@@@Z
?GetSocketQuaternion@USceneComponent@@UEBA?AU?$TQuat@N@Math@UE@@VFName@@@Z
?DoesSocketExist@USceneComponent@@UEBA_NVFName@@@Z
?HasAnySockets@USceneComponent@@UEBA_NXZ
?QuerySupportedSockets@USceneComponent@@UEBAXAEAV?$TArray@UFComponentSocketDescription@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetComponentVelocity@USceneComponent@@UEBA?AU?$TVector@N@Math@UE@@XZ
?IsVisible@USceneComponent@@UEBA_NXZ
?OnVisibilityChanged@USceneComponent@@MEAAXXZ
?OnHiddenInGameChanged@USceneComponent@@MEAAXXZ
?UpdateOverlapsImpl@USceneComponent@@MEAA_NPEBV?$TArrayView@$$CBUFOverlapInfo@@H@@_N0@Z
?MoveComponentImpl@USceneComponent@@MEAA_NAEBU?$TVector@N@Math@UE@@AEBU?$TQuat@N@34@_NPEAUFHitResult@@W4EMoveComponentFlags@@W4ETeleportType@@@Z
?OnAttachmentChanged@USceneComponent@@UEAAXXZ
?CalcLocalBounds@USceneComponent@@UEBA?AU?$TBoxSphereBounds@NN@Math@UE@@XZ
?CalcBoundingCylinder@USceneComponent@@UEBAXAEAM0@Z
?UpdateBounds@USceneComponent@@UEAAXXZ
?ShouldCollideWhenPlacing@USceneComponent@@UEBA_NXZ
?UpdatePhysicsVolume@USceneComponent@@UEAAX_N@Z
?GetCollisionResponseToChannels@USceneComponent@@UEBAAEBUFCollisionResponseContainer@@XZ
?IsWorldGeometry@USceneComponent@@UEBA_NXZ
?GetCollisionEnabled@USceneComponent@@UEBA?AW4Type@ECollisionEnabled@@XZ
?GetCollisionResponseToChannel@USceneComponent@@UEBA?AW4ECollisionResponse@@W4ECollisionChannel@@@Z
?GetCollisionObjectType@USceneComponent@@UEBA?AW4ECollisionChannel@@XZ
?SetMobility@USceneComponent@@UEAAXW4Type@EComponentMobility@@@Z
?CanAttachAsChild@USceneComponent@@UEBA_NPEBV1@VFName@@@Z
?GetPlacementExtent@USceneComponent@@UEBA?AU?$TBoxSphereBounds@NN@Math@UE@@XZ
?OnChildAttached@USceneComponent@@MEAAXPEAV1@@Z
?OnChildDetached@USceneComponent@@MEAAXPEAV1@@Z
?CanHaveStaticMobility@USceneComponent@@UEBA?B_NXZ
?PropagateLightingScenarioChange@USceneComponent@@UEAAXXZ
?IsPrecomputedLightingValid@USceneComponent@@UEBA_NXZ
?AddAssetUserData@UActorComponent@@UEAAXPEAVUAssetUserData@@@Z
?GetAssetUserDataOfClass@UActorComponent@@UEAAPEAVUAssetUserData@@V?$TSubclassOf@VUAssetUserData@@@@@Z
?RemoveUserDataOfClass@UActorComponent@@UEAAXV?$TSubclassOf@VUAssetUserData@@@@@Z
?GetFunctionCallspace@UBlueprintFunctionLibrary@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?PostLoad@UActorComponent@@UEAAXXZ
?AdditionalStatObject@UActorComponent@@UEBAPEBVUObject@@XZ
?OnUpdateTransform@USceneComponent@@MEAAXW4EUpdateTransformFlags@@W4ETeleportType@@@Z
?CalcBounds@USceneComponent@@UEBA?AU?$TBoxSphereBounds@NN@Math@UE@@AEBU?$TTransform@N@34@@Z
?_getUObject@UActorComponent@@UEBAPEAVUObject@@XZ
?IsAvailable@FEngineAnalytics@@SA_NXZ
?GetProvider@FEngineAnalytics@@SAAEAVIAnalyticsProviderET@@XZ
?RunCommandOnAudioThread@FAudioThread@@SAXV?$TUniqueFunction@$$A6AXXZ@@UTStatId@@@Z
?Z_Construct_UClass_UBlueprintFunctionLibrary@@YAPEAVUClass@@XZ
??1UBlueprintFunctionLibrary@@UEAA@XZ
??0UBlueprintFunctionLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0UBlueprintFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
?GetPrivateStaticClass@UBlueprintFunctionLibrary@@CAPEAVUClass@@XZ
?AddReferencedObjects@UActorComponent@@SAXPEAVUObject@@AEAVFReferenceCollector@@@Z
?StaticConfigName@UActorComponent@@SAPEB_WXZ
?DestroyComponent@USceneComponent@@UEAAX_N@Z
?RequiresGameThreadEndOfFrameRecreate@UActorComponent@@UEBA_NXZ
?IsVisibleInEditor@USceneComponent@@UEBA_NXZ

unrealserver-audiomixer

?OnUnregister@USynthComponent@@UEAAXXZ
?OnRegister@USynthComponent@@UEAAXXZ
?Deactivate@USynthComponent@@UEAAXXZ
?IsReadyForOwnerToAutoDestroy@USynthComponent@@UEBA_NXZ
?Serialize@USynthComponent@@UEAAXAEAVFArchive@@@Z
?Serialize@USynthComponent@@UEAAXVFStructuredArchiveRecord@@@Z
?SetLowPassFilterFrequency@USynthComponent@@UEAAXM@Z
?GetSoundClass@USynthComponent@@UEAAPEAVUSoundClass@@XZ
?CreateSoundGenerator@USynthComponent@@MEAA?AV?$TSharedPtr@VISoundGenerator@@$00@@AEBUFSoundGeneratorInitParams@@@Z
?OnStop@USynthComponent@@MEAAXXZ
?OnStart@USynthComponent@@MEAAXXZ
?Z_Construct_UClass_USynthComponent@@YAPEAVUClass@@XZ
?BeginDestroy@USynthComponent@@UEAAXXZ
?Stop@USynthComponent@@QEAAXXZ
??0USynthComponent@@QEAA@AEBVFObjectInitializer@@@Z
??1USynthComponent@@UEAA@XZ
??0USynthComponent@@QEAA@AEAVFVTableHelper@@@Z
?StaticClass@USynthComponent@@SAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioGenerator@@YAPEAVUClass@@XZ
?OnGeneratedAudio@UAudioGenerator@@IEAAXPEBMH@Z
?Init@UAudioGenerator@@IEAAXHH@Z
?EndPlay@USynthComponent@@UEAAXW4Type@EEndPlayReason@@@Z
??1UAudioGenerator@@UEAA@XZ
??0UAudioGenerator@@QEAA@XZ
?StaticClass@UAudioGenerator@@SAPEAVUClass@@XZ
??0UAudioGenerator@@QEAA@AEAVFVTableHelper@@@Z
?Activate@USynthComponent@@UEAAX_N@Z

unrealserver-audiocapturecore

?IsCapturing@FAudioCaptureSynth@Audio@@QEBA_NXZ
?IsStreamOpen@FAudioCaptureSynth@Audio@@QEBA_NXZ
?GetAudioData@FAudioCaptureSynth@Audio@@QEAA_NAEAV?$TArray@MV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetNumSamplesEnqueued@FAudioCaptureSynth@Audio@@QEAAHXZ
?StopCapturing@FAudioCaptureSynth@Audio@@QEAAXXZ
?StartCapturing@FAudioCaptureSynth@Audio@@QEAA_NXZ
?OpenDefaultStream@FAudioCaptureSynth@Audio@@QEAA_NXZ
?GetDefaultCaptureDeviceInfo@FAudioCaptureSynth@Audio@@QEAA_NAEAUFCaptureDeviceInfo@2@@Z
??1FAudioCaptureSynth@Audio@@UEAA@XZ
??0FAudioCaptureSynth@Audio@@QEAA@XZ
?IsCapturing@FAudioCapture@Audio@@QEBA_NXZ
?IsStreamOpen@FAudioCapture@Audio@@QEBA_NXZ
?StopStream@FAudioCapture@Audio@@QEAA_NXZ
?StartStream@FAudioCapture@Audio@@QEAA_NXZ
?OpenCaptureStream@FAudioCapture@Audio@@QEAA_NAEBUFAudioCaptureDeviceParams@2@V?$TFunction@$$A6AXPEBMHHHN_N@Z@@I@Z
?GetCaptureDeviceInfo@FAudioCapture@Audio@@QEAA_NAEAUFCaptureDeviceInfo@2@H@Z
?GetCaptureDevicesAvailable@FAudioCapture@Audio@@QEAAHAEAV?$TArray@UFCaptureDeviceInfo@Audio@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
??1FAudioCapture@Audio@@QEAA@XZ
??0FAudioCapture@Audio@@QEAA@XZ
?AbortCapturing@FAudioCaptureSynth@Audio@@QEAAXXZ

vcruntime140

__current_exception
__current_exception_context
memset
__C_specific_handler
memcpy
__std_type_info_destroy_list
_purecall

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_register_onexit_function
_initialize_narrow_environment
_execute_onexit_table
terminate
_initterm_e
_initterm
_initialize_onexit_table
_cexit
_crt_at_quick_exit
_configure_narrow_argv
_crt_atexit

kernel32

SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
DisableThreadLibraryCalls
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

Exports

Exports

??$StaticClass@VUAudioCapture@@@@YAPEAVUClass@@XZ
??$StaticClass@VUAudioCaptureBlueprintLibrary@@@@YAPEAVUClass@@XZ
??$StaticClass@VUAudioCaptureComponent@@@@YAPEAVUClass@@XZ
??$StaticClass@VUAudioCaptureFunctionLibrary@@@@YAPEAVUClass@@XZ
??$StaticStruct@UFAudioCaptureDeviceInfo@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFAudioInputDeviceInfo@@@@YAPEAVUScriptStruct@@XZ
??0FAudioCaptureDeviceInfo@@QEAA@XZ
??0FAudioInputDeviceInfo@@QEAA@$$QEAU0@@Z
??0FAudioInputDeviceInfo@@QEAA@AEBU0@@Z
??0FAudioInputDeviceInfo@@QEAA@AEBUFCaptureDeviceInfo@Audio@@@Z
??0FAudioInputDeviceInfo@@QEAA@XZ
??0UAudioCapture@@QEAA@AEAVFVTableHelper@@@Z
??0UAudioCapture@@QEAA@XZ
??0UAudioCaptureBlueprintLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0UAudioCaptureBlueprintLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??0UAudioCaptureComponent@@IEAA@AEBVFObjectInitializer@@@Z
??0UAudioCaptureComponent@@QEAA@AEAVFVTableHelper@@@Z
??0UAudioCaptureFunctionLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0UAudioCaptureFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??1FAudioInputDeviceInfo@@QEAA@XZ
??1UAudioCapture@@UEAA@XZ
??1UAudioCaptureBlueprintLibrary@@UEAA@XZ
??1UAudioCaptureComponent@@UEAA@XZ
??1UAudioCaptureFunctionLibrary@@UEAA@XZ
??2UAudioCapture@@SAPEAX_KPEAW4EInternal@@@Z
??2UAudioCapture@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??2UAudioCaptureBlueprintLibrary@@SAPEAX_KPEAW4EInternal@@@Z
??2UAudioCaptureBlueprintLibrary@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??2UAudioCaptureComponent@@SAPEAX_KPEAW4EInternal@@@Z
??2UAudioCaptureComponent@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??2UAudioCaptureFunctionLibrary@@SAPEAX_KPEAW4EInternal@@@Z
??2UAudioCaptureFunctionLibrary@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3UAudioCapture@@SAXPEAX@Z
??3UAudioCaptureBlueprintLibrary@@SAXPEAX@Z
??3UAudioCaptureComponent@@SAXPEAX@Z
??3UAudioCaptureFunctionLibrary@@SAXPEAX@Z
??4FAudioCaptureDeviceInfo@@QEAAAEAU0@$$QEAU0@@Z
??4FAudioCaptureDeviceInfo@@QEAAAEAU0@AEBU0@@Z
??4FAudioInputDeviceInfo@@QEAAAEAU0@$$QEAU0@@Z
??4FAudioInputDeviceInfo@@QEAAAEAU0@AEBU0@@Z
??_7UAudioCapture@@6B@
??_7UAudioCaptureBlueprintLibrary@@6B@
??_7UAudioCaptureComponent@@6BIInterface_AssetUserData@@@
??_7UAudioCaptureComponent@@6BUObject@@@
??_7UAudioCaptureFunctionLibrary@@6B@
??_FUAudioCaptureBlueprintLibrary@@QEAAXXZ
??_FUAudioCaptureFunctionLibrary@@QEAAXXZ
?BeginDestroy@UAudioCaptureComponent@@MEAAXXZ
?Conv_AudioInputDeviceInfoToString@UAudioCaptureBlueprintLibrary@@SA?AVFString@@AEBUFAudioInputDeviceInfo@@@Z
?CreateAudioCapture@UAudioCaptureFunctionLibrary@@SAPEAVUAudioCapture@@XZ
?FOnAudioInputDevicesObtained_DelegateWrapper@@YAXAEBV?$TScriptDelegate@UFWeakObjectPtr@@@@AEBV?$TArray@UFAudioInputDeviceInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?FinishDestroy@UAudioCaptureComponent@@MEAAXXZ
?GetAudioCaptureDeviceInfo@UAudioCapture@@QEAA_NAEAUFAudioCaptureDeviceInfo@@@Z
?GetAvailableAudioInputDevices@UAudioCaptureBlueprintLibrary@@SAXPEBVUObject@@AEBVFOnAudioInputDevicesObtained@@@Z
?GetPrivateStaticClass@UAudioCapture@@CAPEAVUClass@@XZ
?GetPrivateStaticClass@UAudioCaptureBlueprintLibrary@@CAPEAVUClass@@XZ
?GetPrivateStaticClass@UAudioCaptureComponent@@CAPEAVUClass@@XZ
?GetPrivateStaticClass@UAudioCaptureFunctionLibrary@@CAPEAVUClass@@XZ
?Init@UAudioCaptureComponent@@MEAA_NAEAH@Z
?IsCapturingAudio@UAudioCapture@@QEAA_NXZ
?IsReadyForFinishDestroy@UAudioCaptureComponent@@MEAA_NXZ
?OnBeginGenerate@UAudioCaptureComponent@@MEAAXXZ
?OnEndGenerate@UAudioCaptureComponent@@MEAAXXZ
?OnGenerateAudio@UAudioCaptureComponent@@MEAAHPEAMH@Z
?OpenDefaultAudioStream@UAudioCapture@@QEAA_NXZ
?StartCapturingAudio@UAudioCapture@@QEAAXXZ
?StaticClass@UAudioCapture@@SAPEAVUClass@@XZ
?StaticClass@UAudioCaptureBlueprintLibrary@@SAPEAVUClass@@XZ
?StaticClass@UAudioCaptureComponent@@SAPEAVUClass@@XZ
?StaticClass@UAudioCaptureFunctionLibrary@@SAPEAVUClass@@XZ
?StaticClassCastFlags@UAudioCapture@@SA?AW4EClassCastFlags@@XZ
?StaticClassCastFlags@UAudioCaptureBlueprintLibrary@@SA?AW4EClassCastFlags@@XZ
?StaticClassCastFlags@UAudioCaptureComponent@@SA?AW4EClassCastFlags@@XZ
?StaticClassCastFlags@UAudioCaptureFunctionLibrary@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@UAudioCapture@@2W4EClassFlags@@B
?StaticClassFlags@UAudioCaptureBlueprintLibrary@@2W4EClassFlags@@B
?StaticClassFlags@UAudioCaptureComponent@@2W4EClassFlags@@B
?StaticClassFlags@UAudioCaptureFunctionLibrary@@2W4EClassFlags@@B
?StaticPackage@UAudioCapture@@SAPEB_WXZ
?StaticPackage@UAudioCaptureBlueprintLibrary@@SAPEB_WXZ
?StaticPackage@UAudioCaptureComponent@@SAPEB_WXZ
?StaticPackage@UAudioCaptureFunctionLibrary@@SAPEB_WXZ
?StaticRegisterNativesUAudioCapture@UAudioCapture@@CAXXZ
?StaticRegisterNativesUAudioCaptureBlueprintLibrary@UAudioCaptureBlueprintLibrary@@CAXXZ
?StaticRegisterNativesUAudioCaptureComponent@UAudioCaptureComponent@@CAXXZ
?StaticRegisterNativesUAudioCaptureFunctionLibrary@UAudioCaptureFunctionLibrary@@CAXXZ
?StaticStruct@FAudioCaptureDeviceInfo@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FAudioInputDeviceInfo@@SAPEAVUScriptStruct@@XZ
?StopCapturingAudio@UAudioCapture@@QEAAXXZ
?Z_Construct_UClass_UAudioCapture@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCaptureBlueprintLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCaptureBlueprintLibrary_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCaptureComponent@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCaptureComponent_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCaptureFunctionLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCaptureFunctionLibrary_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAudioCapture_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UDelegateFunction_AudioCapture_OnAudioInputDevicesObtained__DelegateSignature@@YAPEAVUFunction@@XZ
?Z_Construct_UScriptStruct_FAudioCaptureDeviceInfo@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FAudioInputDeviceInfo@@YAPEAVUScriptStruct@@XZ
?__DefaultConstructor@UAudioCapture@@SAXAEBVFObjectInitializer@@@Z
?__DefaultConstructor@UAudioCaptureBlueprintLibrary@@SAXAEBVFObjectInitializer@@@Z
?__DefaultConstructor@UAudioCaptureComponent@@SAXAEBVFObjectInitializer@@@Z
?__DefaultConstructor@UAudioCaptureFunctionLibrary@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@UAudioCapture@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?__VTableCtorCaller@UAudioCaptureBlueprintLibrary@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?__VTableCtorCaller@UAudioCaptureComponent@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?__VTableCtorCaller@UAudioCaptureFunctionLibrary@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?execConv_AudioInputDeviceInfoToString@UAudioCaptureBlueprintLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execCreateAudioCapture@UAudioCaptureFunctionLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetAudioCaptureDeviceInfo@UAudioCapture@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execGetAvailableAudioInputDevices@UAudioCaptureBlueprintLibrary@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execIsCapturingAudio@UAudioCapture@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execStartCapturingAudio@UAudioCapture@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
?execStopCapturingAudio@UAudioCapture@@SAXPEAVUObject@@AEAUFFrame@@QEAX@Z
InitializeModule

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18de478adab60f1092dc62d8aa3e230d

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-core

unrealserver-coreuobject

unrealserver-engine

unrealserver-audiomixer

unrealserver-audiocapturecore

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.uedbg Size: 2KB - Virtual size: 2KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 29KB - Virtual size: 28KB

.uedbg
Size: 2KB - Virtual size: 2KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 2KB - Virtual size: 1KB