NEAS[.]754d066432bd653184a7b65a44bdd6f0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.754d066432bd653184a7b65a44bdd6f0.exe
Size

161KB
MD5

754d066432bd653184a7b65a44bdd6f0
SHA1

931d940ac2c4a1431f93562fe65f29c0de5cfba7
SHA256

2493ac5e7690cbe845ecd516caa9520a8d822c32874bff349337fa6a70c6afa7
SHA512

cb716a2d1b2e2d00b20b4e4b22d6a83d880f15c8df6e094f20e4afeece3cb02bf2c81873dbee9b0d49f9a59a3e23ea3e3418a19a7c568aaa416e52dc1164b484
SSDEEP

3072:fViWiD7b1XEetlV+MCcN7E4dhB0iC7Rs7IPxlYYfqY6KQy6kLXoTbuGUQtO9caMd:fVQnWWYfqY6KQy6kLXY1RZUmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.754d066432bd653184a7b65a44bdd6f0.exe

Files

NEAS.754d066432bd653184a7b65a44bdd6f0.exe
.dll windows:6 windows x64

5019362ff4ae965ee6586b784109876e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-projects

?Get@IPluginManager@@SAAEAV1@XZ

unrealserver-core

?DefaultUnfrozenCopy@Freeze@@YAIAEBVFMemoryUnfreezeContent@@PEBXAEBUFTypeLayoutDesc@@PEAX@Z
?DefaultAppendHash@Freeze@@YAIAEBUFTypeLayoutDesc@@AEBUFPlatformTypeLayoutParameters@@AEAVFSHA1@@@Z
?DefaultGetTargetAlignment@Freeze@@YAIAEBUFTypeLayoutDesc@@AEBUFPlatformTypeLayoutParameters@@@Z
?DefaultToString@Freeze@@YAXPEBXAEBUFTypeLayoutDesc@@AEBUFPlatformTypeLayoutParameters@@AEAUFMemoryToStringContext@@@Z
?FindFieldNameLength@Freeze@@YAEPEB_W@Z
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
??0FString@@QEAA@XZ
??0FString@@QEAA@PEB_W@Z
??1FString@@QEAA@XZ
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
?ToString@FName@@QEBAXAEAVFString@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?IsInGameThread@@YA_NXZ
?IsInRenderingThread@@YA_NXZ
?IsInRHIThread@@YA_NXZ
?GetEmitDrawEvents@@YA_NXZ
??1FText@@QEAA@XZ
?ForUseOnlyByLocMacroAndGraphNodeTextLiterals_CreateText@FInternationalization@@SA?AVFText@@PEB_W00@Z
?DoTestCriticalStall@@YAXXZ
?LockFreeTagCounterHasOverflowed@@YAXXZ
?AllocLockFreeLink@FLockFreeLinkPolicy@@SAIXZ
?FreeLockFreeLink@FLockFreeLinkPolicy@@SAXI@Z
?MemoryTrace_GetActiveTag@@YAHXZ
??0FMemScope@@QEAA@W4ELLMTag@@_N@Z
??0FMemScope@@QEAA@AEBVFName@@_N@Z
??1FMemScope@@QEAA@XZ
?Get@FLowLevelMemTracker@@SAAEAV1@XZ
?OnLowLevelAlloc@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBX_KW4ELLMTag@@W4ELLMAllocType@@_N@Z
?OnLowLevelFree@FLowLevelMemTracker@@QEAAXW4ELLMTracker@@PEBXW4ELLMAllocType@@_N@Z
?GetActiveTagData@FLowLevelMemTracker@@QEAAPEBVFTagData@LLMPrivate@UE@@W4ELLMTracker@@W4ELLMTagSet@@@Z
??0FLLMScope@@QEAA@VFName@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
??0FLLMScope@@QEAA@W4ELLMTag@@_NW4ELLMTagSet@@W4ELLMTracker@@1@Z
?Destruct@FLLMScope@@IEAAXXZ
?Get@FThreadStatsPool@@SAAEAU1@XZ
?GetFromPool@FThreadStatsPool@@QEAAPEAVFThreadStats@@XZ
?Flush@FThreadStats@@QEAAX_N0@Z
?FlushRawStats@FThreadStats@@QEAAX_N0@Z
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?AllocateNewChunk@FMemStackBase@@AEAAXH@Z
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?MemoryTrace_Alloc@@YAX_K0II@Z
?MemoryTrace_Free@@YAX_KI@Z
?SaveStack@FMetadataTrace@@SAIXZ
?GenerateTaskId@TaskTrace@@YA_KXZ
?Launched@TaskTrace@@YAX_KPEB_W_NW4Type@ENamedThreads@@@Z
?Scheduled@TaskTrace@@YAX_K@Z
?SubsequentAdded@TaskTrace@@YAX_K0@Z
??0FTaskTimingEventScope@TaskTrace@@QEAA@_K@Z
??1FTaskTimingEventScope@TaskTrace@@QEAA@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?CreateGraphEvent@FGraphEvent@@SA?AV?$TRefCountPtr@VFGraphEvent@@@@XZ
?DispatchSubsequents@FGraphEvent@@QEAAXAEAV?$TArray@PEAVFBaseGraphTask@@V?$TSizedDefaultAllocator@$0CA@@@@@W4Type@ENamedThreads@@@Z
?Recycle@FGraphEvent@@CAXPEAV1@@Z
?CombineInternal@FPaths@@KAXAEAVFString@@PEBV?$TStringView@_W@@H@Z
??0FMessageLog@@QEAA@AEBVFName@@@Z
??1FMessageLog@@QEAA@XZ
?Warning@FMessageLog@@QEAA?AV?$TSharedRef@VFTokenizedMessage@@$00@@AEBVFText@@@Z
?CpuChannel@@3AEAVFChannel@Trace@UE@@EA
?GCycleStatsShouldEmitNamedEvents@@3HA
?GShouldEmitVerboseNamedEvents@@3_NA
?GTestCriticalStalls@@3HA
?LinkAllocator@FLockFreeLinkPolicy@@2V?$TLockFreeAllocOnceIndexedAllocator@UFIndexedLockFreeLink@@$0EAAAAAA@$0EAAA@@@A
?bIsDisabled@FLowLevelMemTracker@@2_NA
?TlsSlot@FThreadStats@@0IA
?bPrimaryEnable@FThreadStats@@0_NA
?bPrimaryDisableForever@FThreadStats@@0_NA
?bIsRawStatsActive@FThreadStats@@0_NA
?DefaultWriteMemoryImage@Freeze@@YAXAEAVFMemoryImageWriter@@PEBXAEBUFTypeLayoutDesc@@2@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GIgnoreDebugger@@3_NA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?BeginNamedEvent@FWindowsPlatformMisc@@SAXAEBUFColor@@PEBD@Z
?EndNamedEvent@FWindowsPlatformMisc@@SAXXZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?OutputEventType@FCpuProfilerTrace@@SAIPEB_WPEBDI@Z
?OutputBeginEvent@FCpuProfilerTrace@@SAXI@Z
?OutputBeginDynamicEvent@FCpuProfilerTrace@@SAXPEBD0I@Z
?OutputEndEvent@FCpuProfilerTrace@@SAXXZ
?DefaultWriteMemoryImageField@Freeze@@YAXAEAVFMemoryImageWriter@@PEBX1AEBUFTypeLayoutDesc@@2@Z
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Initialize@FTypeLayoutDesc@@SAXAEAU1@@Z
?Free@FMemory@@SAXPEAX@Z

unrealserver-coreuobject

?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetDesc@UObject@@UEAA?AVFString@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?PostEditImport@UObject@@UEAAXXZ
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?PostDuplicate@UObject@@UEAAX_N@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostCDOContruct@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?Z_Construct_UClass_UObject_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UScriptStruct_FVector2D@@YAPEAVUScriptStruct@@XZ
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?HasGetTypeHash@ICppStructOps@UScriptStruct@@QEBA_NXZ
??1ICppStructOps@UScriptStruct@@UEAA@XZ
??0ICppStructOps@UScriptStruct@@QEAA@HH@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?StaticConfigName@UObject@@SAPEB_WXZ
?StaticClass@UObject@@SAPEAVUClass@@XZ
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?GetTransientPackage@@YAPEAVUPackage@@XZ
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?StaticClass@FFloatProperty@@SAPEAVFFieldClass@@XZ

unrealserver-engine

?GetFunctionCallspace@UBlueprintFunctionLibrary@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?GameThread_GetRenderTargetResource@UTextureRenderTarget@@QEAAPEAVFTextureRenderTargetResource@@XZ
?Z_Construct_UClass_UTextureRenderTarget2D_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UBlueprintFunctionLibrary@@YAPEAVUClass@@XZ
??1UBlueprintFunctionLibrary@@UEAA@XZ
??0UBlueprintFunctionLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0UBlueprintFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
?GetPrivateStaticClass@UBlueprintFunctionLibrary@@CAPEAVUClass@@XZ

unrealserver-rendercore

?RenderCommandsChannel@@3AEAVFChannel@Trace@UE@@EA
?GetGlobalShaderMap@@YAPEAVFGlobalShaderMap@@W4EShaderPlatform@@@Z
??0FShader@@QEAA@XZ
?GetShader@FShaderMapResource@@QEAAPEAVFRHIShader@@H@Z
?AddShaderSourceDirectoryMapping@@YAXAEBVFString@@0@Z
??0FGlobalShader@@QEAA@AEBUFShaderCompiledShaderInitializerType@@@Z
?StaticGetTypeLayout@FGlobalShader@@SAAEAUFTypeLayoutDesc@@XZ
?GetShader@FGlobalShaderMap@@QEBA?AV?$TShaderRefBase@VFShader@@VFShaderMapPointerTable@@@@PEAVFShaderType@@H@Z
??0FGlobalShaderType@@QEAA@AEAUFTypeLayoutDesc@@PEB_W11IHP6APEAVFShader@@XZP6APEAV2@AEBUFShaderCompiledShaderInitializerType@@@ZP6A_NAEBUFShaderPermutationParameters@@@ZP6A?AW4ERayTracingPayloadType@@H@ZIPEBVFShaderParametersMetadata@@@Z
?Stop@FDrawEvent@@QEAAXXZ
?Start@FDrawEvent@@QEAAXPEAVFRHIComputeCommandList@@UFColor@@PEB_WZZ
?GetResource@FShaderMapBase@@QEBAPEAVFShaderMapResource@@XZ
??1FShader@@QEAA@XZ
??1FShaderType@@UEAA@XZ
?GetRayTracingPayloadType@FShader@@SA?AW4ERayTracingPayloadType@@H@Z
?GMainThreadBlockedOnRenderThread@@3V?$TAtomic@_N@@A
?GetFriendlyName@FRenderResource@@UEBA?AVFString@@XZ
?InitResource@FRenderResource@@UEAAXXZ
?ReleaseDynamicRHI@FRenderResource@@UEAAXXZ
?InitDynamicRHI@FRenderResource@@UEAAXXZ
??0FRenderResource@@QEAA@XZ
??1FRenderResource@@UEAA@XZ
?ReleaseResource@FRenderResource@@UEAAXXZ
?BeginInitResource@@YAXPEAVFRenderResource@@@Z
?GetDesiredThread@FRenderCommand@@SA?AW4Type@ENamedThreads@@XZ
?GetSubsequentsMode@FRenderCommand@@SA?AW4Type@ESubsequentsMode@@XZ
?GetImmediateCommandList_ForRenderCommand@@YAAEAVFRHICommandListImmediate@@XZ
?GetVertexDeclarationFVector4@@YAAEAV?$TRefCountPtr@VFRHIVertexDeclaration@@@@XZ
?StaticGetTypeLayout@FShaderParameter@@SAAEAUFTypeLayoutDesc@@XZ
?Bind@FShaderParameter@@QEAAXAEBVFShaderParameterMap@@PEB_WW4EShaderParameterFlags@@@Z

unrealserver-rhi

?GRHICommandList@@3VFRHICommandListExecutor@@A
?SetGraphicsPipelineState@@YAXAEAVFRHICommandList@@AEBVFGraphicsPipelineStateInitializer@@IW4EApplyRendertargetOption@@_NW4EPSOPrecacheResult@@@Z
?GDynamicRHI@@3PEAVFDynamicRHI@@EA
?GIsRHIInitialized@@3_NA
?GRHISupportsRHIThread@@3_NA
?Infos@FGenericDataDrivenShaderPlatformInfo@@0PAV1@A
?LegacyShaderPlatformToShaderFormat@@YA?AVFName@@W4EShaderPlatform@@@Z
?Destroy@FRHIResource@@AEBAXXZ
?IsMultisampled@FRHITexture@@QEBA_NXZ
?Validate@FRHIRenderPassInfo@@QEBAXXZ
?PreDraw@FRHIParameterBatcher@@QEAAXAEAVFRHICommandList@@@Z
?CacheActiveRenderTargets@FRHICommandListBase@@IEAAXAEBUFRHIRenderPassInfo@@@Z
?Execute@FRHICommandDrawPrimitive@@QEAAXAEAVFRHICommandListBase@@@Z
?RHICommandsChannel@@3AEAVFChannel@Trace@UE@@EA
?Execute@FRHICommandBeginRenderPass@@QEAAXAEAVFRHICommandListBase@@@Z
?Transition@FRHIComputeCommandList@@QEAAXV?$TArrayView@$$CBUFRHITransitionInfo@@H@@@Z
?Execute@?$FRHICommandSetShaderParameter@VFRHIGraphicsShader@@@@QEAAXAEAVFRHICommandListBase@@@Z
?ApplyCachedRenderTargets@FRHICommandList@@QEAAXAEAVFGraphicsPipelineStateInitializer@@@Z
?EndRenderPass@FRHICommandList@@QEAAXXZ
?Execute@FRHICommandSetViewport@@QEAAXAEAVFRHICommandListBase@@@Z
?IsValid@FGenericDataDrivenShaderPlatformInfo@@SA_NUFGenericStaticShaderPlatform@@@Z
?GShaderPlatformForFeatureLevel@@3PAW4EShaderPlatform@@A

kernel32

InitializeSListHead
DisableThreadLibraryCalls
TlsGetValue
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceCounter

vcruntime140

__std_type_info_destroy_list
__current_exception_context
_purecall
memcpy
memset
__current_exception
__C_specific_handler

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

tanf

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
terminate
_initialize_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc
free

Exports

Exports

??$StaticClass@VULensDistortionBlueprintLibrary@@@@YAPEAVUClass@@XZ
??$StaticStruct@UFLensDistortionCameraModel@@@@YAPEAVUScriptStruct@@XZ
??0FLensDistortionCameraModel@@QEAA@XZ
??0ULensDistortionBlueprintLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0ULensDistortionBlueprintLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??1ULensDistortionBlueprintLibrary@@UEAA@XZ
??4FLensDistortionCameraModel@@QEAAAEAU0@$$QEAU0@@Z
??4FLensDistortionCameraModel@@QEAAAEAU0@AEBU0@@Z
??8FLensDistortionCameraModel@@QEBA_NAEBU0@@Z
??9FLensDistortionCameraModel@@QEBA_NAEBU0@@Z
??_FULensDistortionBlueprintLibrary@@QEAAXXZ
?DrawUVDisplacementToRenderTarget@FLensDistortionCameraModel@@QEBAXPEAVUWorld@@MMMPEAVUTextureRenderTarget2D@@MM@Z
?GetPrivateStaticClass@ULensDistortionBlueprintLibrary@@CAPEAVUClass@@XZ
?GetUndistortOverscanFactor@FLensDistortionCameraModel@@QEBAMMM@Z
?StaticStruct@FLensDistortionCameraModel@@SAPEAVUScriptStruct@@XZ
?UndistortNormalizedViewPosition@FLensDistortionCameraModel@@QEBA?AU?$TVector2@N@Math@UE@@U234@@Z
?Z_Construct_UClass_ULensDistortionBlueprintLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_ULensDistortionBlueprintLibrary_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UScriptStruct_FLensDistortionCameraModel@@YAPEAVUScriptStruct@@XZ
InitializeModule

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5019362ff4ae965ee6586b784109876e

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-projects

unrealserver-core

unrealserver-coreuobject

unrealserver-engine

unrealserver-rendercore

unrealserver-rhi

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 46KB - Virtual size: 46KB

.uedbg Size: 4KB - Virtual size: 4KB

.rdata Size: 43KB - Virtual size: 42KB

.data Size: 1KB - Virtual size: 4KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 1024B - Virtual size: 756B

.text
Size: 46KB - Virtual size: 46KB

.uedbg
Size: 4KB - Virtual size: 4KB

.rdata
Size: 43KB - Virtual size: 42KB

.data
Size: 1KB - Virtual size: 4KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 1024B - Virtual size: 756B