NEAS[.]c2f4e9aac94fbcb055db2fad85840410[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c2f4e9aac94fbcb055db2fad85840410.exe
Size

4.2MB
MD5

c2f4e9aac94fbcb055db2fad85840410
SHA1

055927f9ce8289b4dd4d8a6bbdcfdc994106c843
SHA256

741d6dee48f266c88a38760e9dff2f68b0c7cbd3e224076ded482c40207c59dc
SHA512

e27b0749f5033a3cbc78a8b3cdf12fe696502ae5408cbf3d88b249b5784a275fd7d4de7813b7102bc4beb9d37e3bf0a40a65d3e462a0ce812eeb66aef9fe747e
SSDEEP

24576:150SPIAavMbHiWHQRAPEmHy7a6UhG0n5pfCNnSSVwBH/v0jfHdkkkkkkkkkkJmR5:15nubmSGrhj5IyB/c5KgGRW9/i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c2f4e9aac94fbcb055db2fad85840410.exe

Files

NEAS.c2f4e9aac94fbcb055db2fad85840410.exe
.dll windows:6 windows x64

1154e9112fbf68b79cf9e87749401a29

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

factorygame-core-win64-shipping

?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?Strnicmp@FGenericPlatformStricmp@@SAHPEB_W0_K@Z
?NumberOfCoresIncludingHyperthreads@FWindowsPlatformMisc@@SAHXZ
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Free@FMemory@@SAXPEAX@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
??0FString@@QEAA@XZ
??0FString@@QEAA@$$QEAV0@@Z
??0FString@@QEAA@AEBV0@@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
??0FString@@QEAA@PEBD@Z
??0FString@@QEAA@PEB_W@Z
??4FString@@QEAAAEAV0@PEB_W@Z
?Empty@FString@@QEAAXXZ
?Find@FString@@QEBAHPEB_WW4Type@ESearchCase@@W42ESearchDir@@H@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
??1FString@@QEAA@XZ
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GetCurrentTag@FTaskTagScope@@SA?AW4ETaskTag@@XZ
?IsInGameThread@@YA_NXZ
?IsInActualRenderingThread@@YA_NXZ
?GetSecondsPerCycle@FGenericPlatformTime@@SANXZ
?Get@FThreadSingletonInitializer@@SAPEAVFTlsAutoCleanup@@V?$TFunctionRef@$$A6APEAVFTlsAutoCleanup@@XZ@@AEAI@Z
?LockFreeTagCounterHasOverflowed@@YAXXZ
?AllocLockFreeLink@FLockFreeLinkPolicy@@SAIXZ
?FreeLockFreeLink@FLockFreeLinkPolicy@@SAXI@Z
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
??0FEventRef@@QEAA@W4EEventMode@@@Z
??1FEventRef@@QEAA@XZ
?RestoreInheritedContext@FInheritedContextBase@UE@@QEAA?AVFInheritedContextScope@2@XZ
??0FThreadSafeRefCountedObject@@QEAA@XZ
??1FThreadSafeRefCountedObject@@UEAA@XZ
?AddRef@FThreadSafeRefCountedObject@@QEBAIXZ
?Release@FThreadSafeRefCountedObject@@QEBAIXZ
?AnsiMalloc@@YAPEAX_KI@Z
?AnsiFree@@YAXPEAX@Z
?FreeChunks@FMemStackBase@@AEAAXPEAUFTaggedMemory@1@@Z
?GetTlsSlot@?$TThreadSingleton@VFMemStack@@@@CAAEAIXZ
??0FMemStack@@QEAA@XZ
??1FMemStack@@UEAA@XZ
?GetActiveTask@FTask@LowLevelTasks@@SAPEBV12@XZ
??0FText@@QEAA@XZ
??0FText@@QEAA@AEBV0@@Z
??0FText@@QEAA@$$QEAV0@@Z
??4FText@@QEAAAEAV0@AEBV0@@Z
??4FText@@QEAAAEAV0@$$QEAV0@@Z
?ToString@FText@@QEBAAEBVFString@@XZ
??1FText@@QEAA@XZ
?ForUseOnlyByLocMacroAndGraphNodeTextLiterals_CreateText@FInternationalization@@SA?AVFText@@PEB_W00@Z
?IsWorkerThread@FSchedulerTls@LowLevelTasks@@QEBA_NXZ
?LaunchInternal@FScheduler@LowLevelTasks@@AEAAXAEAVFTask@2@W4EQueuePreference@2@_N@Z
??1FTaskTimingEventScope@TaskTrace@@QEAA@XZ
?Get@FTaskGraphInterface@@SAAEAV1@XZ
?CreateGraphEvent@FGraphEvent@@SA?AV?$TRefCountPtr@VFGraphEvent@@@@XZ
?DispatchSubsequents@FGraphEvent@@QEAAXAEAV?$TArray@PEAVFBaseGraphTask@@V?$TSizedDefaultAllocator@$0CA@@@@@W4Type@ENamedThreads@@@Z
?Recycle@FGraphEvent@@CAXPEAV1@@Z
?ShouldUseThreadingForPerformance@FApp@@SA_NXZ
?IsForkedMultithreadInstance@FForkProcessHelper@@SA_NXZ
?LinkAllocator@FLockFreeLinkPolicy@@2V?$TLockFreeAllocOnceIndexedAllocator@UFIndexedLockFreeLink@@$0EAAAAAA@$0EAAA@@@A
?Singleton@FScheduler@LowLevelTasks@@0V12@A
?RenderThread_Local@FRenderThreadStatics@ENamedThreads@@0V?$TAtomic@W4Type@ENamedThreads@@@@A
?GParallelForBackgroundYieldingTimeoutMs@@3HA
?Wait@FEvent@@QEAA_NXZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA

factorygame-colormanagement-win64-shipping

?GetWorking@FColorSpace@Color@UE@@SAAEBV123@XZ

factorygame-imagecore-win64-shipping

?GetBytesPerPixel@ERawImageFormat@@YAHW4Type@1@@Z
??0FImage@@QEAA@HHHW4Type@ERawImageFormat@@W4EGammaSpace@@@Z
?Init@FImage@@QEAAXHHW4Type@ERawImageFormat@@W4EGammaSpace@@@Z
?CopyImage@FImageCore@@YAXAEBUFImageView@@0@Z
?CopyImageRGBABGRA@FImageCore@@YAXAEBUFImageView@@0@Z
?WriteDDS@FDDSFile@DDS@UE@@QEAA?AW4EDDSError@23@AEAV?$TArray@EV?$TSizedDefaultAllocator@$0EA@@@@@W4EDDSFormatVersion@23@@Z
?CreateEmpty2D@FDDSFile@DDS@UE@@SAPEAU123@IIIW4EDXGIFormat@23@IPEAW4EDDSError@23@@Z
?IsValidTexture2D@FDDSFile@DDS@UE@@QEBA_NXZ
?CreateFromDDSInMemory@FDDSFile@DDS@UE@@SAPEAU123@PEBE_JPEAW4EDDSError@23@_N@Z
?IsADDS@FDDSFile@DDS@UE@@SA_NPEBE_J@Z
?ConvertChannelOrder@FDDSFile@DDS@UE@@QEAAXW4EChannelOrder@23@@Z
?ConvertRGBXtoRGBA@FDDSFile@DDS@UE@@QEAAXXZ
?GetMipImage@FDDSFile@DDS@UE@@QEBA_NAEBUFImageView@@H@Z
?FillMip@FDDSFile@DDS@UE@@QEAAXAEBUFImageView@@H@Z
?DXGIFormatFromRawFormat@DDS@UE@@YA?AW4EDXGIFormat@12@W4Type@ERawImageFormat@@W4EGammaSpace@@@Z
?DXGIFormatGetClosestRawFormat@DDS@UE@@YA?AW4Type@ERawImageFormat@@W4EDXGIFormat@12@PEA_N@Z

kernel32

InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
MultiByteToWideChar
CloseHandle
GetLastError
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
DebugBreak
ReleaseSemaphore
WaitForSingleObject
LocalFree
FormatMessageA
CreateSemaphoreA
RtlCaptureContext

msvcp140

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
_Thrd_yield
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z

vcruntime140

memchr
__std_type_info_destroy_list
_purecall
__RTDynamicCast
__current_exception
memcmp
__std_terminate
__current_exception_context
wcsrchr
longjmp
memset
memmove
memcpy
__std_exception_copy
__intrinsic_setjmp
__C_specific_handler
__std_exception_destroy
_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_cexit
_initterm
_initterm_e
strerror
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_errno
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
terminate
exit
_execute_onexit_table

api-ms-win-crt-math-l1-1-0

ldexp
exp
log
atan2
_fdclass
sqrt
ceilf
cosf
floorf
ceil
pow
modf
frexp
floor

api-ms-win-crt-heap-l1-1-0

_aligned_malloc
_aligned_free
calloc
malloc
free
realloc

api-ms-win-crt-stdio-l1-1-0

fputc
__acrt_iob_func
fflush
fread
fwrite
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vsscanf

api-ms-win-crt-string-l1-1-0

tolower
strcmp
toupper
strncpy
strncmp

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-convert-l1-1-0

atof
atoi

api-ms-win-crt-utility-l1-1-0

rand
bsearch
qsort

api-ms-win-crt-environment-l1-1-0

_putenv
getenv

Exports

Exports

??0FHdrImageWrapper@@QEAA@$$QEAV0@@Z
??0FHdrImageWrapper@@QEAA@AEBV0@@Z
??0FHdrImageWrapper@@QEAA@XZ
??1FHdrImageWrapper@@UEAA@XZ
??4FHdrImageWrapper@@QEAAAEAV0@$$QEAV0@@Z
??4FHdrImageWrapper@@QEAAAEAV0@AEBV0@@Z
??4ImageWrapperHelper@@QEAAAEAV0@$$QEAV0@@Z
??4ImageWrapperHelper@@QEAAAEAV0@AEBV0@@Z
??_7FHdrImageWrapper@@6B@
?CanSetRawFormat@FHdrImageWrapper@@UEBA_NW4ERGBFormat@@H@Z
?ConvertRGBFormat@IImageWrapper@@SA?AW4Type@ERawImageFormat@@W4ERGBFormat@@HPEA_N@Z
?ConvertRawImageFormat@IImageWrapper@@SAXW4Type@ERawImageFormat@@AEAW4ERGBFormat@@AEAH@Z
?DecompressScanline@FHdrImageWrapper@@AEAA_NPEAEAEAPEBEPEBE@Z
?DecompressTGA_helper@@YA_NPEBUFTGAFileHeader@@_JAEAPEAIH@Z
?FailHeaderParsing@FHdrImageWrapper@@AEAA_NXZ
?FailMalformedScanline@FHdrImageWrapper@@AEAA_NXZ
?FailUnexpectedEOB@FHdrImageWrapper@@AEAA_NXZ
?FreeCompressedData@FHdrImageWrapper@@QEAAXXZ
?GetBitDepth@FHdrImageWrapper@@UEBAHXZ
?GetCompressed@FHdrImageWrapper@@UEAA?AV?$TArray@EV?$TSizedDefaultAllocator@$0EA@@@@@H@Z
?GetErrorMessage@FHdrImageWrapper@@QEBAAEBVFText@@XZ
?GetFormat@FHdrImageWrapper@@UEBA?AW4ERGBFormat@@XZ
?GetFormatExtension@ImageWrapperHelper@@SA?AV?$TStringView@_W@@W4EImageFormat@@_N@Z
?GetHeaderLine@FHdrImageWrapper@@AEAA_NAEAPEBEQEAD@Z
?GetHeight@FHdrImageWrapper@@UEBAHXZ
?GetImageFilesFilterString@ImageWrapperHelper@@SA?BV?$TStringView@_W@@_N@Z
?GetImageFormat@ImageWrapperHelper@@SA?AW4EImageFormat@@V?$TStringView@_W@@@Z
?GetRGBFormatBytesPerPel@IImageWrapper@@SAHW4ERGBFormat@@H@Z
?GetRaw@FHdrImageWrapper@@UEAA_NW4ERGBFormat@@HAEAV?$TArray@EV?$TSizedDefaultAllocator@$0EA@@@@@@Z
?GetSupportedRawFormat@FHdrImageWrapper@@UEBA?AW4Type@ERawImageFormat@@W423@@Z
?GetWidth@FHdrImageWrapper@@UEBAHXZ
?HaveBytes@FHdrImageWrapper@@CA_NPEBE0H@Z
?IsCompressedImageValid@FHdrImageWrapper@@AEBA_NXZ
?OldDecompressScanline@FHdrImageWrapper@@AEAA_NPEAEAEAPEBEPEBEH_N@Z
?ParseImageSize@FHdrImageWrapper@@CA_NPEBDPEAH1@Z
?ParseMatchString@FHdrImageWrapper@@CA_NAEAPEBDPEBD@Z
?ParsePositiveInt@FHdrImageWrapper@@CA_NAEAPEBDPEAH@Z
?SetAndLogError@FHdrImageWrapper@@AEAAXAEBVFText@@@Z
?SetCompressed@FHdrImageWrapper@@UEAA_NPEBX_J@Z
?SetCompressedFromView@FHdrImageWrapper@@QEAA_NV?$TArrayView@$$CBE_J@@@Z
?SetRaw@FHdrImageWrapper@@UEAA_NPEBX_JHHW4ERGBFormat@@HH@Z
InitializeModule
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_name
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1154e9112fbf68b79cf9e87749401a29

Headers

DLL Characteristics

File Characteristics

Imports

factorygame-core-win64-shipping

factorygame-colormanagement-win64-shipping

factorygame-imagecore-win64-shipping

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.uedbg Size: 8KB - Virtual size: 7KB

.rdata Size: 2.7MB - Virtual size: 2.7MB

.data Size: 13KB - Virtual size: 16KB

.pdata Size: 47KB - Virtual size: 46KB

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.uedbg
Size: 8KB - Virtual size: 7KB

.rdata
Size: 2.7MB - Virtual size: 2.7MB

.data
Size: 13KB - Virtual size: 16KB

.pdata
Size: 47KB - Virtual size: 46KB

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 4KB - Virtual size: 3KB