NEAS[.]05512ad99d5522c6779add0d516bfdb0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05512ad99d5522c6779add0d516bfdb0_JC.exe
Size

116KB
MD5

05512ad99d5522c6779add0d516bfdb0
SHA1

356219ccb4ff0291d2c4777dea22be8d5de69567
SHA256

e5fc99b607022641b57329c17a7f8bb5bba95a1f57fc313f3fea4ab4faf57553
SHA512

8e68532eb6ac9673f1ff45f05d04df99355837d863e28d72662ad242a6695e628a66fed459c9b6941507a23f76aebefd9ffb99fbddc4c7a5c93a667f1bca49ae
SSDEEP

3072:SL2JDTBMIXqy6SniO9caMFHt1BWg9RkkBzq:SSJaI6ybiRZUmR/q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05512ad99d5522c6779add0d516bfdb0_JC.exe

Files

NEAS.05512ad99d5522c6779add0d516bfdb0_JC.exe
.dll windows:6 windows x64

65e7379f86c5bc8f40c82a0af312abc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

factorygame-coreuobject-win64-shipping

?IsValid@FWeakObjectPtr@@QEBA_NXZ
??0ICppStructOps@UScriptStruct@@QEAA@HH@Z
??1ICppStructOps@UScriptStruct@@UEAA@XZ
?HasGetTypeHash@ICppStructOps@UScriptStruct@@QEBA_NXZ
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?StaticClass@FIntProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FFloatProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FBoolProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FObjectPropertyBase@@SAPEAVFFieldClass@@XZ
?StaticClass@FEnumProperty@@SAPEAVFFieldClass@@XZ
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?StaticClass@UInterface@@SAPEAVUClass@@XZ
??0UInterface@@QEAA@AEBVFObjectInitializer@@@Z
??0UInterface@@QEAA@AEAVFVTableHelper@@@Z
?Z_Construct_UClass_UInterface@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UObject@@YAPEAVUClass@@XZ
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?GetFunctionCallspace@UObject@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@_N@Z
?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?GetDesc@UObject@@UEAA?AVFString@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?PostEditImport@UObject@@UEAAXXZ
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?PostDuplicate@UObject@@UEAAX_N@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostCDOContruct@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?Get@FWeakObjectPtr@@QEBAPEAVUObject@@XZ
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?FindFunctionChecked@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?FindFunction@UObject@@QEBAPEAVUFunction@@VFName@@@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
??0UObject@@QEAA@AEAVFVTableHelper@@@Z
??0UObject@@QEAA@AEBVFObjectInitializer@@@Z
?StaticConfigName@UObject@@SAPEB_WXZ
?StaticClass@UObject@@SAPEAVUClass@@XZ
?GetInterfaceAddress@UObjectBaseUtility@@QEAAPEAXPEAVUClass@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
??1UObjectBase@@UEAA@XZ
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
??0FStaticConstructObjectParameters@@QEAA@PEBVUClass@@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?AssertIfInConstructor@FObjectInitializer@@SAXPEAVUObject@@PEB_W@Z
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?StaticConstructObject_Internal@@YAPEAVUObject@@AEBUFStaticConstructObjectParameters@@@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetTransientPackage@@YAPEAVUPackage@@XZ

factorygame-core-win64-shipping

?LoadModuleChecked@FModuleManager@@QEAAAEAVIModuleInterface@@VFName@@@Z
?GetModule@FModuleManager@@QEAAPEAVIModuleInterface@@VFName@@@Z
?Get@FModuleManager@@SAAEAV1@XZ
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
??1FString@@QEAA@XZ
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
??4FString@@QEAAAEAV0@PEB_W@Z
??0FString@@QEAA@PEB_W@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??0FString@@QEAA@AEBV0@@Z
??0FString@@QEAA@XZ
?QuantizeSize@FMemory@@SA_K_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?Free@FMemory@@SAXPEAX@Z
?IsModuleLoaded@FModuleManager@@QEBA_NVFName@@@Z

factorygame-engine-win64-shipping

??0FTickableGameObject@@QEAA@XZ
??1FTickableGameObject@@UEAA@XZ
?Z_Construct_UClass_UTexture_NoRegister@@YAPEAVUClass@@XZ
?GetTickableGameObjectWorld@FTickableGameObject@@UEBAPEAVUWorld@@XZ
?IsTickableInEditor@FTickableGameObject@@UEBA_NXZ
?IsTickableWhenPaused@FTickableGameObject@@UEBA_NXZ
?IsAllowedToTick@FTickableObjectBase@@UEBA_NXZ
?GetTickableTickType@FTickableObjectBase@@UEBA?AW4ETickableTickType@@XZ

vcruntime140

memcpy
__C_specific_handler
__std_type_info_destroy_list
_purecall
memset

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_initterm_e
_initterm
_cexit
_seh_filter_dll
_execute_onexit_table

kernel32

InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

??$StaticClass@VUAppleImageInterface@@@@YAPEAVUClass@@XZ
??$StaticClass@VUAppleImageUtilsBaseAsyncTaskBlueprintProxy@@@@YAPEAVUClass@@XZ
??$StaticEnum@W4EAppleTextureType@@@@YAPEAVUEnum@@XZ
??$StaticEnum@W4ETextureRotationDirection@@@@YAPEAVUEnum@@XZ
??$StaticStruct@UFAppleImageUtilsImageConversionResult@@@@YAPEAVUScriptStruct@@XZ
??0FAppleImageUtilsConversionTaskBase@@IEAA@XZ
??0FAppleImageUtilsConversionTaskBase@@QEAA@AEBV0@@Z
??0IAppleImageInterface@@QEAA@AEBV0@@Z
??0IAppleImageInterface@@QEAA@XZ
??0IAppleImageUtilsConversionTask@@QEAA@$$QEAV0@@Z
??0IAppleImageUtilsConversionTask@@QEAA@AEBV0@@Z
??0IAppleImageUtilsConversionTask@@QEAA@XZ
??0IAppleImageUtilsPlugin@@QEAA@$$QEAV0@@Z
??0IAppleImageUtilsPlugin@@QEAA@AEBV0@@Z
??0IAppleImageUtilsPlugin@@QEAA@XZ
??0UAppleImageInterface@@QEAA@AEAVFVTableHelper@@@Z
??0UAppleImageInterface@@QEAA@AEBVFObjectInitializer@@@Z
??0UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@QEAA@AEAVFVTableHelper@@@Z
??0UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@QEAA@AEBVFObjectInitializer@@@Z
??1FAppleImageUtilsConversionTaskBase@@MEAA@XZ
??1IAppleImageInterface@@MEAA@XZ
??1IAppleImageUtilsPlugin@@UEAA@XZ
??1UAppleImageInterface@@UEAA@XZ
??1UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@UEAA@XZ
??2UAppleImageInterface@@SAPEAX_KPEAW4EInternal@@@Z
??2UAppleImageInterface@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3UAppleImageInterface@@SAXPEAX@Z
??4IAppleImageInterface@@QEAAAEAV0@AEBV0@@Z
??4IAppleImageUtilsConversionTask@@QEAAAEAV0@$$QEAV0@@Z
??4IAppleImageUtilsConversionTask@@QEAAAEAV0@AEBV0@@Z
??4IAppleImageUtilsPlugin@@QEAAAEAV0@$$QEAV0@@Z
??4IAppleImageUtilsPlugin@@QEAAAEAV0@AEBV0@@Z
??_7FAppleImageUtilsConversionTaskBase@@6B@
??_7IAppleImageInterface@@6B@
??_7IAppleImageUtilsConversionTask@@6B@
??_7IAppleImageUtilsPlugin@@6B@
??_7UAppleImageInterface@@6B@
??_FUAppleImageInterface@@QEAAXXZ
??_FUAppleImageUtilsBaseAsyncTaskBlueprintProxy@@QEAAXXZ
?FAppleImageConversionDelegate_DelegateWrapper@@YAXAEBV?$TMulticastScriptDelegate@UFWeakObjectPtr@@@@AEBUFAppleImageUtilsImageConversionResult@@@Z
?Get@IAppleImageUtilsPlugin@@SAAEAV1@XZ
?GetConvertedImageSize@FAppleImageUtilsConversionTaskBase@@UEBA?AU?$TIntPoint@H@Math@UE@@XZ
?GetElapsedTime@FAppleImageUtilsConversionTaskBase@@UEBAMXZ
?GetErrorReason@FAppleImageUtilsConversionTaskBase@@UEBA?AVFString@@XZ
?GetPrivateStaticClass@UAppleImageInterface@@CAPEAVUClass@@XZ
?GetPrivateStaticClass@UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@CAPEAVUClass@@XZ
?HadError@FAppleImageUtilsConversionTaskBase@@UEBA_NXZ
?IsAvailable@IAppleImageUtilsPlugin@@SA_NXZ
?IsDone@FAppleImageUtilsConversionTaskBase@@UEBA_NXZ
?Load@IAppleImageUtilsPlugin@@SAAEAV1@XZ
?StaticClass@UAppleImageInterface@@SAPEAVUClass@@XZ
?StaticClassCastFlags@UAppleImageInterface@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@UAppleImageInterface@@2W4EClassFlags@@B
?StaticPackage@UAppleImageInterface@@SAPEB_WXZ
?StaticRegisterNativesUAppleImageInterface@UAppleImageInterface@@CAXXZ
?StaticStruct@FAppleImageUtilsImageConversionResult@@SAPEAVUScriptStruct@@XZ
?Z_Construct_UClass_UAppleImageInterface@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAppleImageInterface_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAppleImageUtilsBaseAsyncTaskBlueprintProxy@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UAppleImageUtilsBaseAsyncTaskBlueprintProxy_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UDelegateFunction_AppleImageUtils_AppleImageConversionDelegate__DelegateSignature@@YAPEAVUFunction@@XZ
?Z_Construct_UEnum_AppleImageUtils_EAppleTextureType@@YAPEAVUEnum@@XZ
?Z_Construct_UEnum_AppleImageUtils_ETextureRotationDirection@@YAPEAVUEnum@@XZ
?Z_Construct_UScriptStruct_FAppleImageUtilsImageConversionResult@@YAPEAVUScriptStruct@@XZ
?__DefaultConstructor@UAppleImageInterface@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@UAppleImageInterface@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
?_getUObject@IAppleImageInterface@@UEBAPEAVUObject@@XZ
InitializeModule

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65e7379f86c5bc8f40c82a0af312abc5

Headers

DLL Characteristics

File Characteristics

Imports

factorygame-coreuobject-win64-shipping

factorygame-core-win64-shipping

factorygame-engine-win64-shipping

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.uedbg Size: 1024B - Virtual size: 884B

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 59KB - Virtual size: 59KB

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 18KB - Virtual size: 17KB

.uedbg
Size: 1024B - Virtual size: 884B

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 59KB - Virtual size: 59KB

.reloc
Size: 1024B - Virtual size: 1024B