NEAS[.]d6c1e0cfc891cf58b96c1c3dc8e69c60[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.d6c1e0cfc891cf58b96c1c3dc8e69c60.exe
Size

161KB
MD5

d6c1e0cfc891cf58b96c1c3dc8e69c60
SHA1

0e4d8aaa2176b2888a8d83a64ac1ecbe0db79d1e
SHA256

b0d698649d963cc9c365c327f54bfd499b75b225687880ae62e7cc42ae67fd84
SHA512

15c6c3d6fa6e7d057cef814ab9d3baed64ec7bec73d6a72b96b890ba76c173bbc72ca71d8b48682e2d5dd5bef789ec43132fc1e7008cc967f4986ec3939e34c7
SSDEEP

3072:T6Yz8PA1/BabJKDYD5SvJm5LLK2qO9caMFHt1BWg9RkkBz:TNb4LK3RZUmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d6c1e0cfc891cf58b96c1c3dc8e69c60.exe

Files

NEAS.d6c1e0cfc891cf58b96c1c3dc8e69c60.exe
.dll windows:6 windows x64

7acc1beded3a31c123faffede4882416

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-coreuobject

?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
?PostInitProperties@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostCDOContruct@UObject@@UEAAXXZ
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?PostLoad@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?FinishDestroy@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PostDuplicate@UObject@@UEAAX_N@Z
?NeedsLoadForClient@UObject@@UEBA_NXZ
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?PostEditImport@UObject@@UEAAXXZ
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?GetDesc@UObject@@UEAA?AVFString@@XZ
?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsAsset@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?IsSafeForRootSet@UObject@@UEBA_NXZ
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetTransientPackage@@YAPEAVUPackage@@XZ
?PostNetReceive@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PreDestroyFromReplication@UObject@@UEAAXXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?GetFunctionCallspace@UObject@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?PreNetReceive@UObject@@UEAAXXZ
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?StaticClass@UObject@@SAPEAVUClass@@XZ
??4FWeakObjectPtr@@QEAAXPEBVUObject@@@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?IsValid@FWeakObjectPtr@@QEBA_NXZ
?IsChildOf@UStruct@@QEBA_NPEBV1@@Z
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ

unrealserver-engine

?IsActorTickEnabled@AActor@@QEBA_NXZ
?GetPrivateStaticClass@AActor@@CAPEAVUClass@@XZ

unrealserver-core

?GParallelForBackgroundYieldingTimeoutMs@@3HA
?RenderThread_Local@FRenderThreadStatics@ENamedThreads@@0V?$TAtomic@W4Type@ENamedThreads@@@@A
?StatPtr_STAT_ParallelFor@@3U?$FThreadSafeStaticStat@UFStat_STAT_ParallelFor@@@@A
?Singleton@FScheduler@LowLevelTasks@@0V12@A
?bIsRawStatsActive@FThreadStats@@0_NA
?bPrimaryDisableForever@FThreadStats@@0_NA
?bPrimaryEnable@FThreadStats@@0_NA
?TlsSlot@FThreadStats@@0IA
?bIsDisabled@FLowLevelMemTracker@@2_NA
?ZeroVector@?$TVector@N@Math@UE@@2U123@B
?GShouldEmitVerboseNamedEvents@@3_NA
?GCycleStatsShouldEmitNamedEvents@@3HA
?LogTemp@@3UFLogCategoryLogTemp@@A
?GIgnoreDebugger@@3_NA
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?IsForkedMultithreadInstance@FForkProcessHelper@@SA_NXZ
?ShouldUseThreadingForPerformance@FApp@@SA_NXZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?RestoreInheritedContext@FInheritedContextBase@UE@@QEAA?AVFInheritedContextScope@2@XZ
?LaunchInternal@FScheduler@LowLevelTasks@@AEAAXAEAVFTask@2@W4EQueuePreference@2@_N@Z
?IsWorkerThread@FSchedulerTls@LowLevelTasks@@QEBA_NXZ
?Destroyed@TaskTrace@@YAX_K@Z
?Completed@TaskTrace@@YAX_K@Z
?Started@TaskTrace@@YAX_K@Z
?Launched@TaskTrace@@YAX_KPEB_W_NW4Type@ENamedThreads@@@Z
?GenerateTaskId@TaskTrace@@YA_KXZ
?GetActiveTask@FTask@LowLevelTasks@@SAPEBV12@XZ
?SaveStack@FMetadataTrace@@SAIXZ
?MemoryTrace_Free@@YAX_KI@Z
?MemoryTrace_Alloc@@YAX_K0II@Z
?AnsiFree@@YAXPEAX@Z
?AnsiMalloc@@YAPEAX_KI@Z
?Release@FThreadSafeRefCountedObject@@QEBAIXZ
?AddRef@FThreadSafeRefCountedObject@@QEBAIXZ
??1FThreadSafeRefCountedObject@@UEAA@XZ
??0FThreadSafeRefCountedObject@@QEAA@XZ
??1FEventRef@@QEAA@XZ
??0FEventRef@@QEAA@W4EEventMode@@@Z
?Wait@FEvent@@QEAA_NXZ
??1FMemStack@@UEAA@XZ
??0FMemStack@@QEAA@XZ
?GetTlsSlot@?$TThreadSingleton@VFMemStack@@@@CAAEAIXZ
?FreeChunks@FMemStackBase@@AEAAXPEAUFTaggedMemory@1@@Z
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?Flush@FThreadStats@@QEAAX_N0@Z
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Get@FThreadStatsPool@@SAAEAU1@XZ
?Destruct@FLLMScope@@IEAAXXZ
??0FLLMScope@@QEAA@W4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?GetActiveTagData@FLowLevelMemTracker@@QEAAPEBVFTagData@LLMPrivate@UE@@W4ELLMTracker@@W4ELLMTagSet@@@Z
?OnLowLevelFree@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBXW4ELLMAllocType@@_N@Z
?OnLowLevelAlloc@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBX_KW4ELLMTag@@W4ELLMAllocType@@_N@Z
?Get@FLowLevelMemTracker@@SAAEAV1@XZ
??1FMemScope@@QEAA@XZ
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
?MemoryTrace_GetActiveTag@@YAHXZ
?GetSecondsPerCycle@FGenericPlatformTime@@SANXZ
?Get@FThreadSingletonInitializer@@SAPEAVFTlsAutoCleanup@@V?$TFunctionRef@$$A6APEAVFTlsAutoCleanup@@XZ@@AEAI@Z
?IsInActualRenderingThread@@YA_NXZ
?GetCurrentTag@FTaskTagScope@@SA?AW4ETaskTag@@XZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?ToString@FName@@QEBA?AVFString@@XZ
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
??1FString@@QEAA@XZ
??0FString@@QEAA@PEBD@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEAXPEB_WZZ
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?OutputBeginDynamicEvent@FCpuProfilerTrace@@SAXPEB_WPEBDI@Z
?OutputBeginDynamicEvent@FCpuProfilerTrace@@SAXPEBD0I@Z
?OutputBeginEvent@FCpuProfilerTrace@@SAXI@Z
?OutputEventType@FCpuProfilerTrace@@SAIPEBD0I@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?Free@FMemory@@SAXPEAX@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?NumberOfCoresIncludingHyperthreads@FWindowsPlatformMisc@@SAHXZ

unrealserver-significancemanager

?UnregisterObject@USignificanceManager@@UEAAXPEAVUObject@@@Z
?Update@USignificanceManager@@UEAAXV?$TArrayView@$$CBU?$TTransform@N@Math@UE@@H@@@Z
?GetWorld@USignificanceManager@@UEBAPEAVUWorld@@XZ
??0USignificanceManager@@QEAA@XZ
?BeginDestroy@USignificanceManager@@UEAAXXZ
?AddReferencedObjects@USignificanceManager@@SAXPEAVUObject@@AEAVFReferenceCollector@@@Z
?Z_Construct_UClass_USignificanceManager@@YAPEAVUClass@@XZ
?StaticClass@USignificanceManager@@SAPEAVUClass@@XZ
?StaticConfigName@USignificanceManager@@SAPEB_WXZ
??0USignificanceManager@@QEAA@AEAVFVTableHelper@@@Z
??1USignificanceManager@@UEAA@XZ

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TlsGetValue
QueryPerformanceCounter

vcruntime140

memset
__current_exception_context
__current_exception
__C_specific_handler
memmove
memcpy
_purecall
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit
_crt_atexit
_cexit
_initterm
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
abort
terminate
_execute_onexit_table
_initterm_e

api-ms-win-crt-heap-l1-1-0

malloc
free

Exports

Exports

??$StaticClass@VUSignificanceManagerAccelerated@@@@YAPEAVUClass@@XZ
??0FStaticAcceleratedManagedObjectInfo@@QEAA@$$QEAU0@@Z
??0FStaticAcceleratedManagedObjectInfo@@QEAA@AEBU0@@Z
??0FStaticAcceleratedManagedObjectInfo@@QEAA@PEAVUObject@@AEBVFName@@W4EPostSignificanceType@USignificanceManager@@V?$TFunction@$$A6AXPEAUFManagedObjectInfo@USignificanceManager@@MM_N@Z@@@Z
??0FStaticAcceleratedManagedSignificanceInfo@@QEAA@AEBU?$TVector@N@Math@UE@@M_NHM@Z
??0USignificanceManagerAccelerated@@QEAA@AEAVFVTableHelper@@@Z
??0USignificanceManagerAccelerated@@QEAA@XZ
??1FStaticAcceleratedManagedObjectInfo@@QEAA@XZ
??1USignificanceManagerAccelerated@@UEAA@XZ
??2USignificanceManagerAccelerated@@SAPEAX_KPEAW4EInternal@@@Z
??2USignificanceManagerAccelerated@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3USignificanceManagerAccelerated@@SAXPEAX@Z
??4FStaticAcceleratedManagedObjectInfo@@QEAAAEAU0@$$QEAU0@@Z
??4FStaticAcceleratedManagedObjectInfo@@QEAAAEAU0@AEBU0@@Z
??4FStaticAcceleratedManagedSignificanceInfo@@QEAAAEAU0@$$QEAU0@@Z
??4FStaticAcceleratedManagedSignificanceInfo@@QEAAAEAU0@AEBU0@@Z
??_7USignificanceManagerAccelerated@@6B@
?DumpSignificanceDebugData@USignificanceManagerAccelerated@@QEAAXXZ
?GetIsTickManaged@USignificanceManagerAccelerated@@MEBA_NPEAVUObject@@@Z
?GetNumTickLevels@USignificanceManagerAccelerated@@MEBAHPEAVUObject@@@Z
?GetObjectLocation@USignificanceManagerAccelerated@@MEBA?AU?$TVector@N@Math@UE@@PEAVUObject@@@Z
?GetPrivateStaticClass@USignificanceManagerAccelerated@@CAPEAVUClass@@XZ
?GetSignificanceNetworkRange@USignificanceManagerAccelerated@@MEBAMPEAVUObject@@@Z
?GetSignificanceRange@USignificanceManagerAccelerated@@MEBAMPEAVUObject@@@Z
?GetTickExponent@USignificanceManagerAccelerated@@MEBAMPEAVUObject@@@Z
?IsEntrySignificant@USignificanceManagerAccelerated@@IEBA_NU?$TVector@N@Math@UE@@M@Z
?OnSignificanceGain@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@W4EPostSignificanceType@USignificanceManager@@@Z
?OnSignificanceLoss@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@W4EPostSignificanceType@USignificanceManager@@@Z
?OnSignificanceNetworkGain@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@W4EPostSignificanceType@USignificanceManager@@@Z
?OnSignificanceNetworkLoss@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@W4EPostSignificanceType@USignificanceManager@@@Z
?OnSignificanceTickRateUpdate@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@HH@Z
?RegisterObject@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@VFName@@V?$TFunction@$$A6AMPEAUFManagedObjectInfo@USignificanceManager@@AEBU?$TTransform@N@Math@UE@@@Z@@W4EPostSignificanceType@USignificanceManager@@V?$TFunction@$$A6AXPEAUFManagedObjectInfo@USignificanceManager@@MM_N@Z@@@Z
?RegisterStaticNetworkObject@USignificanceManagerAccelerated@@UEAAXPEAVUObject@@VFName@@W4EPostSignificanceType@USignificanceManager@@V?$TFunction@$$A6AXPEAUFManagedObjectInfo@USignificanceManager@@MM_N@Z@@@Z
?RegisterStaticObject@USignificanceManagerAccelerated@@UEAAXPEAVUObject@@VFName@@W4EPostSignificanceType@USignificanceManager@@V?$TFunction@$$A6AXPEAUFManagedObjectInfo@USignificanceManager@@MM_N@Z@@@Z
?RemoveStaticNetworkObject@USignificanceManagerAccelerated@@UEAAXPEAVUObject@@@Z
?RemoveStaticObject@USignificanceManagerAccelerated@@UEAAXPEAVUObject@@@Z
?SetIsSignificance@USignificanceManagerAccelerated@@MEAAXPEAVUObject@@_N@Z
?StaticClass@USignificanceManagerAccelerated@@SAPEAVUClass@@XZ
?StaticClassCastFlags@USignificanceManagerAccelerated@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@USignificanceManagerAccelerated@@2W4EClassFlags@@B
?StaticPackage@USignificanceManagerAccelerated@@SAPEB_WXZ
?StaticRegisterNativesUSignificanceManagerAccelerated@USignificanceManagerAccelerated@@CAXXZ
?Update@USignificanceManagerAccelerated@@MEAAXV?$TArrayView@$$CBU?$TTransform@N@Math@UE@@H@@@Z
?Z_Construct_UClass_USignificanceManagerAccelerated@@YAPEAVUClass@@XZ
?Z_Construct_UClass_USignificanceManagerAccelerated_NoRegister@@YAPEAVUClass@@XZ
?__DefaultConstructor@USignificanceManagerAccelerated@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@USignificanceManagerAccelerated@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
InitializeModule

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7acc1beded3a31c123faffede4882416

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-coreuobject

unrealserver-engine

unrealserver-core

unrealserver-significancemanager

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 61KB - Virtual size: 60KB

.uedbg Size: 2KB - Virtual size: 2KB

.rdata Size: 34KB - Virtual size: 33KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 480B

.text
Size: 61KB - Virtual size: 60KB

.uedbg
Size: 2KB - Virtual size: 2KB

.rdata
Size: 34KB - Virtual size: 33KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 480B