NEAS[.]58ed52e97cf914d1097760de52683990[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NEAS.58ed52e97cf914d1097760de52683990.exe
Size

145KB
MD5

58ed52e97cf914d1097760de52683990
SHA1

690d7a32c6d34941a67dad97472c6b32d175704a
SHA256

0fcfb009c1f3e9d55d1a501a3d66908a8a3a24791ab258f831eeb0c9dc1125d2
SHA512

63b8173baaa045b55c881747f7bfadc401f37a705fc7ee478212c933f4a568884ac343890c29192962f7cbe0e4e137d21f4404bc3b9e86635e3c6e2f828a7f90
SSDEEP

3072:pSiZlEXXPOS7s42d1wufGaObImO9caMFHt1BWg9RkkBz:pSylEXXG6LCyjbVRZUmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.58ed52e97cf914d1097760de52683990.exe

Files

NEAS.58ed52e97cf914d1097760de52683990.exe
.dll windows:6 windows x64

e46f82509aea0e96dc03a79ac3bd3c66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-core-win64-shipping

??1FString@@QEAA@XZ
?ToString@FName@@QEBA?AVFString@@XZ
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?GWarn@@3PEAVFFeedbackContext@@EA
?AppendChars@FString@@QEAAXPEB_WH@Z
??0FString@@QEAA@HPEB_W@Z
??0FString@@QEAA@PEBD@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??0FString@@QEAA@AEBV0@@Z
??0FString@@QEAA@XZ
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Free@FMemory@@SAXPEAX@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?Stricmp@FGenericPlatformStricmp@@SAHPEB_W0@Z
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA

unrealserver-coreuobject-win64-shipping

??0UObject@@QEAA@AEBVFObjectInitializer@@@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
??4FWeakObjectPtr@@QEAAXPEBVUObject@@@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?IsA@FFieldVariant@@QEBA_NPEBVUClass@@@Z
?IsA@FFieldVariant@@QEBA_NPEBVFFieldClass@@@Z
?StaticClassCastFlags@UField@@SA?AW4EClassCastFlags@@XZ
?IsChildOf@UStruct@@QEBA_NPEBV1@@Z
??0ICppStructOps@UScriptStruct@@QEAA@HH@Z
??1ICppStructOps@UScriptStruct@@UEAA@XZ
?HasGetTypeHash@ICppStructOps@UScriptStruct@@QEBA_NXZ
?GetPrivateStaticClass@UFunction@@CAPEAVUClass@@XZ
?GetReturnProperty@UFunction@@QEBAPEAVFProperty@@XZ
?GetPrivateStaticClass@UClass@@CAPEAV1@XZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
??0FSoftObjectPath@@QEAA@XZ
??1FSoftObjectPath@@QEAA@XZ
??4FSoftObjectPath@@QEAAAEAU0@AEBU0@@Z
?ResolveObject@FSoftObjectPath@@QEBAPEAVUObject@@XZ
?Reset@FSoftObjectPath@@QEAAXXZ
?GetCurrentTag@FSoftObjectPath@@SAHXZ
?StaticClass@FProperty@@SAPEAVFFieldClass@@XZ
?StaticClassCastFlagsPrivate@FProperty@@SA_KXZ
?StaticClassCastFlags@FProperty@@SA_KXZ
?ExportTextItem_Direct@FProperty@@QEBAXAEAVFString@@PEBX1PEAVUObject@@H2@Z
?ExportTextItem_InContainer@FProperty@@QEBAXAEAVFString@@PEBX1PEAVUObject@@H2@Z
?ImportText_InContainer@FProperty@@QEBAPEB_WPEB_WPEAXPEAVUObject@@HPEAVFOutputDevice@@@Z
?ImportText_Direct@FProperty@@QEBAPEB_WPEB_WPEAXPEAVUObject@@HPEAVFOutputDevice@@@Z
?StaticClassCastFlagsPrivate@FByteProperty@@SA_KXZ
?StaticClass@FFloatProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FBoolProperty@@SAPEAVFFieldClass@@XZ
?StaticClassCastFlagsPrivate@FBoolProperty@@SA_KXZ
?StaticClassCastFlagsPrivate@FObjectProperty@@SA_KXZ
?StaticClassCastFlagsPrivate@FWeakObjectProperty@@SA_KXZ
?StaticClassCastFlagsPrivate@FSoftObjectProperty@@SA_KXZ
?StaticClass@FArrayProperty@@SAPEAVFFieldClass@@XZ
?StaticClassCastFlagsPrivate@FArrayProperty@@SA_KXZ
?StaticClassCastFlagsPrivate@FMapProperty@@SA_KXZ
?StaticClassCastFlagsPrivate@FSetProperty@@SA_KXZ
?StaticClass@FStructProperty@@SAPEAVFFieldClass@@XZ
?StaticClassCastFlagsPrivate@FStructProperty@@SA_KXZ
?AddTail@?$TDoubleLinkedList@PEAVFProperty@@@@QEAA_NAEBQEAVFProperty@@@Z
?SetActivePropertyNode@FEditPropertyChain@@QEAA_NPEAVFProperty@@@Z
?SetActiveMemberPropertyNode@FEditPropertyChain@@QEAA_NPEAVFProperty@@@Z
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?Z_Construct_UClass_UFunction@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UStruct@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UObject@@YAPEAVUClass@@XZ
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?GetFunctionCallspace@UObject@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?StaticClass@UObject@@SAPEAVUClass@@XZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?GetDesc@UObject@@UEAA?AVFString@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?PostEditImport@UObject@@UEAAXXZ
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?PostDuplicate@UObject@@UEAAX_N@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostCDOContruct@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?GIsSavingPackage@@3_NA
?GUObjectArray@@3VFUObjectArray@@A
?StaticConfigName@UObject@@SAPEB_WXZ
?IsValid@FTopLevelAssetPath@@QEBA_NXZ
?GetTransientPackage@@YAPEAVUPackage@@XZ
?StaticConstructObject_Internal@@YAPEAVUObject@@AEBUFStaticConstructObjectParameters@@@Z
?AssertIfInConstructor@FObjectInitializer@@SAXPEAVUObject@@PEB_W@Z
??0FStaticConstructObjectParameters@@QEAA@PEBVUClass@@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
??1UObjectBase@@UEAA@XZ
?IsValidLowLevel@UObjectBase@@QEBA_NXZ
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?IsSupportedForNetworking@UObject@@UEBA_NXZ

vcruntime140

_purecall
memcpy
memmove
memset
__C_specific_handler
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-convert-l1-1-0

_wtoi

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_cexit
_crt_atexit
_register_onexit_function

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead

Exports

Exports

??$StaticClass@VUPropertyPathTestObject@@@@YAPEAVUClass@@XZ
??$StaticEnum@W4EPropertyPathTestEnum@@@@YAPEAVUEnum@@XZ
??$StaticStruct@UFCachedPropertyPath@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFPropertyPathSegment@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFPropertyPathTestBed@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFPropertyPathTestInnerStruct@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFPropertyPathTestStruct@@@@YAPEAVUScriptStruct@@XZ
??0FCachedPropertyPath@@QEAA@AEBU0@@Z
??0FCachedPropertyPath@@QEAA@AEBUFPropertyPathSegment@@@Z
??0FCachedPropertyPath@@QEAA@AEBV?$TArray@VFString@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
??0FCachedPropertyPath@@QEAA@AEBVFString@@@Z
??0FCachedPropertyPath@@QEAA@XZ
??0FPropertyPathSegment@@QEAA@HPEB_W@Z
??0FPropertyPathSegment@@QEAA@XZ
??1FCachedPropertyPath@@QEAA@XZ
??4FCachedPropertyPath@@QEAAAEAU0@AEBU0@@Z
??4FPropertyPathSegment@@QEAAAEAU0@$$QEAU0@@Z
??4FPropertyPathSegment@@QEAAAEAU0@AEBU0@@Z
??8FCachedPropertyPath@@QEBA_NAEBVFString@@@Z
?CallParentGetters@PropertyPathHelpersInternal@@YAXPEAXAEBUFCachedPropertyPath@@PEBX@Z
?CallParentSetters@PropertyPathHelpersInternal@@YAXAEBUFCachedPropertyPath@@@Z
?CopyPropertyValue@PropertyPathHelpers@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@1@Z
?CopyPropertyValueFast@PropertyPathHelpers@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@1@Z
?Equals@FCachedPropertyPath@@QEBA_NAEBVFString@@@Z
?FindFieldNameAndArrayIndex@PropertyPathHelpers@@YAXHPEB_WAEAHPEAPEB_W1@Z
?GetArrayIndex@FPropertyPathSegment@@QEBAHXZ
?GetCachedAddress@FCachedPropertyPath@@QEBAPEAXXZ
?GetCachedContainer@FCachedPropertyPath@@QEBAPEAXXZ
?GetCachedFunction@FCachedPropertyPath@@QEBAPEAVUFunction@@XZ
?GetCachedLastContainerInPath@FCachedPropertyPath@@QEBAPEAXXZ
?GetCachedLastContainerInPathIndex@FCachedPropertyPath@@QEBAHXZ
?GetFProperty@FCachedPropertyPath@@QEBAPEAVFProperty@@XZ
?GetField@FPropertyPathSegment@@QEBA?AVFFieldVariant@@XZ
?GetFirstParamProperty@PropertyPathHelpersInternal@@YAPEAVFProperty@@PEAVUFunction@@@Z
?GetLastSegment@FCachedPropertyPath@@QEBAAEBUFPropertyPathSegment@@XZ
?GetName@FPropertyPathSegment@@QEBA?AVFName@@XZ
?GetNumSegments@FCachedPropertyPath@@QEBAHXZ
?GetPropertyValueAsString@PropertyPathHelpers@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@AEAVFString@@@Z
?GetPropertyValueAsString@PropertyPathHelpers@@YA_NPEAVUObject@@AEBVFString@@AEAV3@@Z
?GetPropertyValueAsString@PropertyPathHelpers@@YA_NPEAVUObject@@AEBVFString@@AEAV3@AEAPEAVFProperty@@@Z
?GetPropertyValueAsString@PropertyPathHelpers@@YA_NPEAXPEAVUStruct@@AEBUFCachedPropertyPath@@AEAVFString@@@Z
?GetPropertyValueAsString@PropertyPathHelpers@@YA_NPEAXPEAVUStruct@@AEBVFString@@AEAV3@@Z
?GetPropertyValueAsString@PropertyPathHelpers@@YA_NPEAXPEAVUStruct@@AEBVFString@@AEAV3@AEAPEAVFProperty@@@Z
?GetSegment@FCachedPropertyPath@@QEBAAEBUFPropertyPathSegment@@H@Z
?GetStruct@FPropertyPathSegment@@QEBAPEAVUStruct@@XZ
?IsFullyResolved@FCachedPropertyPath@@QEBA_NXZ
?IsResolved@FCachedPropertyPath@@QEBA_NXZ
?IsValid@FCachedPropertyPath@@QEBA_NXZ
?MakeFromString@FCachedPropertyPath@@QEAAXAEBVFString@@@Z
?MakeUnresolvedCopy@FCachedPropertyPath@@SA?AU1@AEBU1@@Z
?MakeUnresolvedCopy@FPropertyPathSegment@@SA?AU1@AEBU1@@Z
?PerformArrayOperation@PropertyPathHelpers@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@V?$TFunctionRef@$$A6A_NAEAVFScriptArrayHelper@@H@Z@@@Z
?PerformArrayOperation@PropertyPathHelpers@@YA_NPEAVUObject@@AEBVFString@@V?$TFunctionRef@$$A6A_NAEAVFScriptArrayHelper@@H@Z@@@Z
?PostSerialize@FPropertyPathSegment@@QEAAXAEBVFArchive@@@Z
?RemoveFromEnd@FCachedPropertyPath@@QEAAXH@Z
?RemoveFromStart@FCachedPropertyPath@@QEAAXH@Z
?Resolve@FCachedPropertyPath@@QEBA_NPEAVUObject@@@Z
?Resolve@FPropertyPathSegment@@QEBA?AVFFieldVariant@@PEAVUStruct@@@Z
?ResolveLeaf@FCachedPropertyPath@@QEBAXPEAVUFunction@@@Z
?ResolveLeaf@FCachedPropertyPath@@QEBAXPEAX@Z
?ResolvePropertyPath@PropertyPathHelpersInternal@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@AEAUFPropertyPathResolver@1@@Z
?ResolvePropertyPath@PropertyPathHelpersInternal@@YA_NPEAVUObject@@AEBVFString@@AEAUFPropertyPathResolver@1@@Z
?ResolvePropertyPath@PropertyPathHelpersInternal@@YA_NPEAXPEAVUStruct@@AEBUFCachedPropertyPath@@AEAUFPropertyPathResolver@1@@Z
?ResolvePropertyPath@PropertyPathHelpersInternal@@YA_NPEAXPEAVUStruct@@AEBVFString@@AEAUFPropertyPathResolver@1@@Z
?SetCachedContainer@FCachedPropertyPath@@QEBAXPEAX@Z
?SetCachedLastContainer@FCachedPropertyPath@@QEBAXPEAXH@Z
?SetCanSafelyUsedCachedAddress@FCachedPropertyPath@@QEBAX_N@Z
?SetPropertyValue@PropertyPathHelpers@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@PEBVUScriptStruct@@PEBE@Z
?SetPropertyValue@PropertyPathHelpers@@YA_NPEAVUObject@@AEBVFString@@PEBVUScriptStruct@@PEBE@Z
?SetPropertyValueFromString@PropertyPathHelpers@@YA_NPEAVUObject@@AEBUFCachedPropertyPath@@AEBVFString@@@Z
?SetPropertyValueFromString@PropertyPathHelpers@@YA_NPEAVUObject@@AEBVFString@@1@Z
?SetPropertyValueFromString@PropertyPathHelpers@@YA_NPEAXPEAVUStruct@@AEBUFCachedPropertyPath@@AEBVFString@@@Z
?SetPropertyValueFromString@PropertyPathHelpers@@YA_NPEAXPEAVUStruct@@AEBVFString@@2@Z
?StaticStruct@FCachedPropertyPath@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FPropertyPathSegment@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FPropertyPathTestBed@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FPropertyPathTestInnerStruct@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FPropertyPathTestStruct@@SAPEAVUScriptStruct@@XZ
?ToEditPropertyChain@FCachedPropertyPath@@QEBAXAEAVFEditPropertyChain@@@Z
?ToPropertyChangedEvent@FCachedPropertyPath@@QEBA?AUFPropertyChangedEvent@@I@Z
?ToString@FCachedPropertyPath@@QEBA?AVFString@@XZ
?Z_Construct_UClass_UPropertyPathTestObject@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UPropertyPathTestObject_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UEnum_PropertyPath_EPropertyPathTestEnum@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FCachedPropertyPath@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FPropertyPathSegment@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FPropertyPathTestBed@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FPropertyPathTestInnerStruct@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FPropertyPathTestStruct@@YAPEAVUScriptStruct@@XZ
InitializeModule

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e46f82509aea0e96dc03a79ac3bd3c66

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-core-win64-shipping

unrealserver-coreuobject-win64-shipping

vcruntime140

vcruntime140_1

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 38KB

.uedbg Size: 3KB - Virtual size: 2KB

.rdata Size: 35KB - Virtual size: 35KB

.data Size: 2KB - Virtual size: 3KB

.pdata Size: 4KB - Virtual size: 3KB

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 39KB - Virtual size: 38KB

.uedbg
Size: 3KB - Virtual size: 2KB

.rdata
Size: 35KB - Virtual size: 35KB

.data
Size: 2KB - Virtual size: 3KB

.pdata
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 1KB - Virtual size: 1KB