NEAS[.]ac557475ab3411c9e385acfcbf347e20[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac557475ab3411c9e385acfcbf347e20.exe
Size

167KB
MD5

ac557475ab3411c9e385acfcbf347e20
SHA1

a4e9715b4128f75994b426106e07789132c3f39e
SHA256

905dd2f95a2658b5aba131fd55bc03f330bd44ecba40dca526110d9af9b51441
SHA512

d8790951ab910457104a80170a09410c88ab0d2a6e39263027bec88940e5ab34d9913a6b07e5e17f358d4b88b07d7311a90fd8ef711c4f6c31d2f55e9fa244f2
SSDEEP

3072:OT1OB+jjv6mYTS0b6Msh+q4lbAbPO9caMFHt1BWg9RkkBz:YL2V1lb2RZUmR/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac557475ab3411c9e385acfcbf347e20.exe

Files

NEAS.ac557475ab3411c9e385acfcbf347e20.exe
.dll windows:6 windows x64

c6b779b57446c4869dfa9f7ff1959747

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

unrealserver-core

?GetTypeHash@@YAIUFNameEntryId@@@Z
?ToString@FName@@QEBA?AVFString@@XZ
??0FName@@QEAA@V?$TStringView@_W@@W4EFindName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
??1FString@@QEAA@XZ
?IsInGameThread@@YA_NXZ
?Wait@FEvent@@QEAA_NXZ
??0FEventRef@@QEAA@W4EEventMode@@@Z
??1FEventRef@@QEAA@XZ
?GIgnoreDebugger@@3_NA
?AppendInt@FString@@QEAAXH@Z
??0FString@@QEAA@PEB_W@Z
??4FString@@QEAAAEAV0@AEBV0@@Z
??4FString@@QEAAAEAV0@$$QEAV0@@Z
??0FString@@QEAA@AEBV0@@Z
??0FString@@QEAA@$$QEAV0@@Z
??0FString@@QEAA@XZ
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?Malloc@FMemory@@SAPEAX_KI@Z
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEAXPEB_WZZ
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
??1FLogCategoryBase@@QEAA@XZ
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?Free@FMemory@@SAXPEAX@Z

unrealserver-coreuobject

??0FGCObject@@QEAA@XZ
??1FGCObject@@UEAA@XZ
?Z_Construct_UClass_UObject@@YAPEAVUClass@@XZ
?Z_Construct_UScriptStruct_FDirectoryPath@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FSoftObjectPath@@YAPEAVUScriptStruct@@XZ
?GetReferencerPropertyName@FGCObject@@UEBA_NPEAVUObject@@AEAVFString@@@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?GetNetPushIdDynamic@UObject@@UEBA_KXZ
?SetNetPushIdDynamic@UObject@@EEAAX_K@Z
?ValidateGeneratedRepEnums@UObject@@UEBAXAEBV?$TArray@UFRepRecord@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?MarkAsEditorOnlySubobject@UObject@@UEAAXXZ
?RegenerateClass@UObject@@UEAAPEAVUClass@@PEAV2@PEAV1@@Z
?ProcessConsoleExec@UObject@@UEAA_NPEB_WAEAVFOutputDevice@@PEAV1@@Z
?CallRemoteFunction@UObject@@UEAA_NPEAVUFunction@@PEAXPEAUFOutParmRec@@PEAUFFrame@@@Z
?GetFunctionCallspace@UObject@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?OverridePerObjectConfigSection@UObject@@UEAAXAEAVFString@@@Z
?OverrideConfigSection@UObject@@UEAAXAEAVFString@@@Z
?GetConfigOverridePlatform@UObject@@UEBAPEB_WXZ
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostRepNotifies@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?GetSubobjectsWithStableNamesForNetworking@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetExternalActorExtendedAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?AreNativePropertiesIdenticalTo@UObject@@UEBA_NPEAV1@@Z
?GetRestoreForUObjectOverwrite@UObject@@UEAAPEAVFRestoreForUObjectOverwrite@@XZ
?GetExporterName@UObject@@UEAA?AVFName@@XZ
?GetNativePropertyValues@UObject@@UEBA_NAEAV?$TMap@VFString@@V1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@VFString@@V1@$0A@@@@@I@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?GetDesc@UObject@@UEAA?AVFString@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?PostReloadConfig@UObject@@UEAAXPEAVFProperty@@@Z
?PostEditImport@UObject@@UEAAXXZ
?ImportCustomProperties@UObject@@UEAAXPEB_WPEAVFFeedbackContext@@@Z
?ExportCustomProperties@UObject@@UEAAXAEAVFOutputDevice@@I@Z
?GetPrestreamPackages@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?IsPostLoadThreadSafe@UObject@@UEBA_NXZ
?HasNonEditorOnlyReferences@UObject@@UEBA_NXZ
?IsEditorOnly@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?PostDuplicate@UObject@@UEAAX_N@Z
?PostDuplicate@UObject@@UEAAXW4Type@EDuplicateMode@@@Z
?PreDuplicate@UObject@@UEAAXAEAUFObjectDuplicationParameters@@@Z
?PostRename@UObject@@UEAAXPEAV1@VFName@@@Z
?PostInterpChange@UObject@@UEAAXPEAVFProperty@@@Z
?ShutdownAfterError@UObject@@UEAAXXZ
?IsReadyForFinishDestroy@UObject@@UEAA_NXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?IsReadyForAsyncPostLoad@UObject@@UEBA_NXZ
?ResolveSubobject@UObject@@UEAA_NPEB_WAEAPEAV1@_N@Z
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostCDOContruct@UObject@@UEAAXXZ
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
??0FSoftObjectPath@@QEAA@XZ
?OnClusterMarkedAsPendingKill@UObjectBaseUtility@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?CanBeClusterRoot@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
?RegisterDependencies@UObjectBase@@MEAAXXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?NeedsLoadForEditorGame@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
??1FSoftObjectPath@@QEAA@XZ
?IsValid@FTopLevelAssetPath@@QEBA_NXZ
?GetTransientPackage@@YAPEAVUPackage@@XZ
?IsInGarbageCollectorThread@@YA_NXZ
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?ConstructUScriptStruct@UECodeGen_Private@@YAXAEAPEAVUScriptStruct@@AEBUFStructParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?GetObjectsOfClass@@YAXPEBVUClass@@AEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@_NW4EObjectFlags@@W4EInternalObjectFlags@@@Z
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?InternalCreateDefaultObjectWrapper@UClass@@AEBAXXZ
?HasGetTypeHash@ICppStructOps@UScriptStruct@@QEBA_NXZ
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
??1UObjectBase@@UEAA@XZ
?GetStaticStruct@@YAPEAVUScriptStruct@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?GetPathName@UObjectBaseUtility@@QEBA?AVFString@@PEBVUObject@@@Z
?StaticClass@UObject@@SAPEAVUClass@@XZ
??0UObject@@QEAA@AEBVFObjectInitializer@@@Z
?GetDetailedInfoInternal@UObject@@MEBA?AVFString@@XZ
??0UObject@@QEAA@AEAVFVTableHelper@@@Z
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?IsChildOf@UStruct@@QEBA_NPEBV1@@Z
??0ICppStructOps@UScriptStruct@@QEAA@HH@Z
??1ICppStructOps@UScriptStruct@@UEAA@XZ

unrealserver-engine

?GetPrivateStaticClass@UDataTable@@CAPEAVUClass@@XZ
?LogDataTable@@3UFLogCategoryLogDataTable@@A
??1FStreamableManager@@UEAA@XZ
??0FStreamableManager@@QEAA@XZ
?LoadSynchronous@FStreamableManager@@QEAAPEAVUObject@@AEBUFSoftObjectPath@@_NPEAV?$TSharedPtr@UFStreamableHandle@@$00@@@Z
?Z_Construct_UScriptStruct_FTableRowBase@@YAPEAVUScriptStruct@@XZ

unrealserver-akaudio

?GetPrivateStaticClass@UAkAudioEvent@@CAPEAVUClass@@XZ
?GetAllExternalSources@UAkAudioEvent@@QEBA?AV?$TArray@UFWwiseExternalSourceCookedData@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?GetShortIDFromString@FAkAudioDevice@@SAIAEBVFString@@@Z

unrealserver-wwiseconcurrency

?Async@FWwiseExecutionQueue@@QEAAX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z

unrealserver-wwisefilehandler

?InstantiateMediaManager@FWwiseFileHandlerModule@@UEAAPEAVIWwiseMediaManager@@XZ
?InstantiateSoundBankManager@FWwiseFileHandlerModule@@UEAAPEAVIWwiseSoundBankManager@@XZ
?InstantiateIOHook@FWwiseFileHandlerModule@@UEAAPEAVFWwiseIOHook@@XZ
?GetFileCache@FWwiseFileHandlerModule@@UEAAPEAVFWwiseFileCache@@XZ
?GetMediaManager@FWwiseFileHandlerModule@@UEAAPEAVIWwiseMediaManager@@XZ
?GetExternalSourceManager@FWwiseFileHandlerModule@@UEAAPEAVIWwiseExternalSourceManager@@XZ
?GetSoundBankManager@FWwiseFileHandlerModule@@UEAAPEAVIWwiseSoundBankManager@@XZ
?CloseStreaming@FWwiseStreamedExternalSourceFileState@@UEAAXXZ
?ProcessRead@FWwiseStreamedExternalSourceFileState@@UEAA?AW4AKRESULT@@AEAUAkFileDesc@@AEBUAkIoHeuristics@@AEAUAkAsyncIOTransferInfo@@$$QEAV?$TUniqueFunction@$$A6AXPEAUAkAsyncIOTransferInfo@@W4AKRESULT@@@Z@@@Z
?CanProcessFileOp@FWwiseStreamedExternalSourceFileState@@UEBA_NXZ
?CloseFile@FWwiseStreamedExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXW4EResult@FWwiseFileState@@@Z@@@Z
?UnloadFromSoundEngine@FWwiseStreamedExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXW4EResult@FWwiseFileState@@@Z@@@Z
?LoadInSoundEngine@FWwiseStreamedExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?OpenFile@FWwiseStreamedExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?GetExternalSourceInfo@FWwiseExternalSourceFileState@@UEAA_NAEAUAkExternalSourceInfo@@@Z
?CloseFile@FWwiseInMemoryExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXW4EResult@FWwiseFileState@@@Z@@@Z
?CanCloseFile@FWwiseFileState@@MEBA_NXZ
?UnloadFromSoundEngine@FWwiseInMemoryExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXW4EResult@FWwiseFileState@@@Z@@@Z
?DecrementLoadCount@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@@Z
?LoadInSoundEngine@FWwiseInMemoryExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?CanLoadInSoundEngine@FWwiseFileState@@MEBA_NXZ
?OpenFile@FWwiseInMemoryExternalSourceFileState@@UEAAX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?CanOpenFile@FWwiseFileState@@MEBA_NXZ
?IncrementLoadCount@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@@Z
?DecrementCountDone@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?DecrementCountClose@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?InstantiateFileCache@FWwiseFileHandlerModule@@UEAAPEAVFWwiseFileCache@@XZ
?DecrementCount@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?IncrementCountDone@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?IncrementCountLoad@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?IncrementCountOpen@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?IncrementCount@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?OnDeleteState@FWwiseExternalSourceManagerImpl@@MEAAXIAEAVFWwiseFileState@@W4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?CloseStreaming@FWwiseFileHandlerBase@@MEAAXIAEAVFWwiseFileState@@@Z
?OpenStreaming@FWwiseFileHandlerBase@@MEAAXPEAUAkAsyncFileOpenData@@@Z
?PrepareExternalSourceInfo@FWwiseExternalSourceManagerImpl@@MEAAIAEAUAkExternalSourceInfo@@AEBUFWwiseExternalSourceCookedData@@@Z
?CloseExternalSourceState@FWwiseExternalSourceManagerImpl@@MEAA_NAEAUFWwiseExternalSourceState@@@Z
?CreateExternalSourceState@FWwiseExternalSourceManagerImpl@@MEAA?AV?$TSharedPtr@UFWwiseExternalSourceState@@$00@@AEBUFWwiseExternalSourceCookedData@@AEBVFName@@@Z
?UnloadExternalSourceImpl@FWwiseExternalSourceManagerImpl@@MEAAXAEBUFWwiseExternalSourceCookedData@@AEBVFName@@AEBUFWwiseLanguageCookedData@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?LoadExternalSourceImpl@FWwiseExternalSourceManagerImpl@@MEAAXAEBUFWwiseExternalSourceCookedData@@AEBVFName@@AEBUFWwiseLanguageCookedData@@$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?OnEndOfEvent@FWwiseExternalSourceManagerImpl@@UEAAXI@Z
?BindPlayingIdToExternalSources@FWwiseExternalSourceManagerImpl@@UEAAXIAEBV?$TArray@IV?$TSizedDefaultAllocator@$0CA@@@@@@Z
?PrepareExternalSourceInfos@FWwiseExternalSourceManagerImpl@@UEAA?AV?$TArray@IV?$TSizedDefaultAllocator@$0CA@@@@@AEAV?$TArray@UAkExternalSourceInfo@@V?$TSizedDefaultAllocator@$0CA@@@@@$$QEBV?$TArray@UFWwiseExternalSourceCookedData@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?SetGranularity@FWwiseExternalSourceManagerImpl@@UEAAXI@Z
?UnloadExternalSource@FWwiseExternalSourceManagerImpl@@UEAAXAEBUFWwiseExternalSourceCookedData@@AEBVFName@@AEBUFWwiseLanguageCookedData@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?LoadExternalSource@FWwiseExternalSourceManagerImpl@@UEAAXAEBUFWwiseExternalSourceCookedData@@AEBVFName@@AEBUFWwiseLanguageCookedData@@$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?DecrementFileStateUse@FWwiseFileHandlerBase@@MEAAXIPEAVFWwiseFileState@@W4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?IncrementFileStateUse@FWwiseFileHandlerBase@@MEAAXIW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6A?AV?$TSharedPtr@VFWwiseFileState@@$00@@XZ@@$$QEAV?$TUniqueFunction@$$A6AXAEBV?$TSharedPtr@VFWwiseFileState@@$00@@_N@Z@@@Z
?GetStreamableFileStateInfo@FWwiseStreamedExternalSourceFileState@@UEBAPEBVFWwiseStreamableFileStateInfo@@XZ
?GetStreamableFileStateInfo@FWwiseStreamedExternalSourceFileState@@UEAAPEAVFWwiseStreamableFileStateInfo@@XZ
?GetShortId@FWwiseExternalSourceFileState@@MEBAIXZ
?GetStreamableFileStateInfo@FWwiseFileState@@UEBAPEBVFWwiseStreamableFileStateInfo@@XZ
?GetStreamableFileStateInfo@FWwiseFileState@@UEAAPEAVFWwiseStreamableFileStateInfo@@XZ
??1FWwiseFileHandlerModule@@UEAA@XZ
?ShutdownModule@FWwiseFileHandlerModule@@UEAAXXZ
?StartupModule@FWwiseFileHandlerModule@@UEAAXXZ
?GetManagingTypeName@FWwiseExternalSourceFileState@@MEBAPEB_WXZ
?CanUnloadFromSoundEngine@FWwiseExternalSourceFileState@@MEBA_NXZ
?CanDelete@FWwiseExternalSourceFileState@@UEBA_NXZ
?ProcessWrite@FWwiseStreamableFileStateInfo@@UEAA?AW4AKRESULT@@AEAUAkFileDesc@@AEBUAkIoHeuristics@@AEAUAkAsyncIOTransferInfo@@$$QEAV?$TUniqueFunction@$$A6AXPEAUAkAsyncIOTransferInfo@@W4AKRESULT@@@Z@@@Z
?GetStreamingHooks@FWwiseExternalSourceManagerImpl@@UEAAAEAVIWwiseStreamingManagerHooks@@XZ
?DecrementCountUnload@FWwiseFileState@@MEAAXW4EWwiseFileStateOperationOrigin@@$$QEAV?$TUniqueFunction@$$A6AX$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z@@$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?GetManagingTypeName@FWwiseExternalSourceManagerImpl@@UEBAPEB_WXZ
??0FWwiseExternalSourceManagerImpl@@QEAA@XZ
??1FWwiseExternalSourceManagerImpl@@UEAA@XZ
??0FWwiseInMemoryExternalSourceFileState@@QEAA@I_NIAEBVFName@@1H@Z
??1FWwiseInMemoryExternalSourceFileState@@UEAA@XZ
??0FWwiseStreamedExternalSourceFileState@@QEAA@I_NIIIAEBVFName@@1H@Z
??1FWwiseStreamedExternalSourceFileState@@UEAA@XZ
??0FWwiseFileHandlerModule@@QEAA@XZ

unrealserver-wwiseresourceloader

?Get@FWwiseResourceLoader@@SAPEAV1@XZ

kernel32

InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
DisableThreadLibraryCalls

vcruntime140

_purecall
memcpy
memmove
__C_specific_handler
__current_exception
__current_exception_context
memset
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
terminate
_initterm_e
_configure_narrow_argv
_seh_filter_dll
_initterm
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment

Exports

Exports

??$StaticClass@VUWwiseExternalSourceSettings@@@@YAPEAVUClass@@XZ
??$StaticStruct@UFWwiseExternalSourceCookieDefaultMedia@@@@YAPEAVUScriptStruct@@XZ
??$StaticStruct@UFWwiseExternalSourceMediaInfo@@@@YAPEAVUScriptStruct@@XZ
??0FWwiseExternalSourceCookieDefaultMedia@@QEAA@$$QEAU0@@Z
??0FWwiseExternalSourceCookieDefaultMedia@@QEAA@AEBU0@@Z
??0FWwiseExternalSourceCookieDefaultMedia@@QEAA@XZ
??0FWwiseExternalSourceMediaInfo@@QEAA@$$QEAU0@@Z
??0FWwiseExternalSourceMediaInfo@@QEAA@AEBU0@@Z
??0FWwiseExternalSourceMediaInfo@@QEAA@XZ
??0FWwiseSimpleExtSrcManager@@QEAA@XZ
??0FWwiseSimpleExtSrcModule@@QEAA@XZ
??0UWwiseExternalSourceSettings@@QEAA@AEAVFVTableHelper@@@Z
??0UWwiseExternalSourceSettings@@QEAA@AEBVFObjectInitializer@@@Z
??1FWwiseExternalSourceCookieDefaultMedia@@UEAA@XZ
??1FWwiseExternalSourceMediaInfo@@UEAA@XZ
??1FWwiseSimpleExtSrcManager@@UEAA@XZ
??1FWwiseSimpleExtSrcModule@@UEAA@XZ
??1UWwiseExternalSourceSettings@@UEAA@XZ
??2UWwiseExternalSourceSettings@@SAPEAX_KPEAW4EInternal@@@Z
??2UWwiseExternalSourceSettings@@SAPEAX_KW4EInternal@@PEAVUObject@@VFName@@W4EObjectFlags@@@Z
??3UWwiseExternalSourceSettings@@SAXPEAX@Z
??4FWwiseExternalSourceCookieDefaultMedia@@QEAAAEAU0@$$QEAU0@@Z
??4FWwiseExternalSourceCookieDefaultMedia@@QEAAAEAU0@AEBU0@@Z
??4FWwiseExternalSourceMediaInfo@@QEAAAEAU0@$$QEAU0@@Z
??4FWwiseExternalSourceMediaInfo@@QEAAAEAU0@AEBU0@@Z
??_7FWwiseExternalSourceCookieDefaultMedia@@6B@
??_7FWwiseExternalSourceMediaInfo@@6B@
??_7FWwiseSimpleExtSrcManager@@6BFWwiseFileHandlerBase@@@
??_7FWwiseSimpleExtSrcManager@@6BIWwiseExternalSourceManager@@@
??_7FWwiseSimpleExtSrcModule@@6B@
??_7UWwiseExternalSourceSettings@@6B@
??_FUWwiseExternalSourceSettings@@QEAAXXZ
?CreateOp@FWwiseSimpleExtSrcManager@@MEAA?AV?$TSharedPtr@VFWwiseFileState@@$00@@AEBUFWwiseExternalSourceMediaInfo@@AEBVFName@@@Z
?FillExternalSourceToMediaMap@FWwiseSimpleExtSrcManager@@MEAAXAEBVUDataTable@@@Z
?FillMediaNameToIdMap@FWwiseSimpleExtSrcManager@@MEAAXAEBVUDataTable@@@Z
?GetExternalSourceStagingDirectory@UWwiseExternalSourceSettings@@SA?AVFString@@XZ
?GetPrivateStaticClass@UWwiseExternalSourceSettings@@CAPEAVUClass@@XZ
?GetStagingDirectory@FWwiseSimpleExtSrcManager@@UEBA?AVFString@@XZ
?InstantiateExternalSourceManager@FWwiseSimpleExtSrcModule@@UEAAPEAVIWwiseExternalSourceManager@@XZ
?LOG_Dynamic@?5??GetExternalSourceStagingDirectory@UWwiseExternalSourceSettings@@SA?AVFString@@XZ@4UFStaticBasicLogDynamicData@Private@Logging@UE@@A
?LOG_Static@?5??GetExternalSourceStagingDirectory@UWwiseExternalSourceSettings@@SA?AVFString@@XZ@4UFStaticBasicLogRecord@Private@Logging@UE@@B
?LoadExternalSourceMedia@FWwiseSimpleExtSrcManager@@MEAAXIAEBVFName@@0$$QEAV?$TUniqueFunction@$$A6AX_N@Z@@@Z
?LoadMediaTables@FWwiseSimpleExtSrcManager@@UEAAXXZ
?LogWwiseSimpleExtSrc@@3UFLogCategoryLogWwiseSimpleExtSrc@@A
?OnDefaultExternalSourceTableChanged@FWwiseSimpleExtSrcManager@@MEAAXXZ
?OnMediaInfoTableChanged@FWwiseSimpleExtSrcManager@@MEAAXXZ
?OnTablesChanged@FWwiseSimpleExtSrcManager@@MEAAXXZ
?ReloadExternalSources@FWwiseSimpleExtSrcManager@@UEAAXXZ
?SetExternalSourceMedia@FWwiseSimpleExtSrcManager@@MEAAXIIAEBVFName@@@Z
?SetExternalSourceMediaById@FWwiseSimpleExtSrcManager@@UEAAXAEBVFName@@H@Z
?SetExternalSourceMediaByName@FWwiseSimpleExtSrcManager@@UEAAXAEBVFName@@0@Z
?SetExternalSourceMediaWithIds@FWwiseSimpleExtSrcManager@@UEAAXHH@Z
?ShutdownModule@FWwiseSimpleExtSrcModule@@UEAAXXZ
?StartupModule@FWwiseSimpleExtSrcModule@@UEAAXXZ
?StaticClass@UWwiseExternalSourceSettings@@SAPEAVUClass@@XZ
?StaticClassCastFlags@UWwiseExternalSourceSettings@@SA?AW4EClassCastFlags@@XZ
?StaticClassFlags@UWwiseExternalSourceSettings@@2W4EClassFlags@@B
?StaticConfigName@UWwiseExternalSourceSettings@@SAPEB_WXZ
?StaticPackage@UWwiseExternalSourceSettings@@SAPEB_WXZ
?StaticRegisterNativesUWwiseExternalSourceSettings@UWwiseExternalSourceSettings@@CAXXZ
?StaticStruct@FWwiseExternalSourceCookieDefaultMedia@@SAPEAVUScriptStruct@@XZ
?StaticStruct@FWwiseExternalSourceMediaInfo@@SAPEAVUScriptStruct@@XZ
?UnloadExternalSourceMedia@FWwiseSimpleExtSrcManager@@MEAAXIAEBVFName@@0$$QEAV?$TUniqueFunction@$$A6AXXZ@@@Z
?Z_Construct_UClass_UWwiseExternalSourceSettings@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UWwiseExternalSourceSettings_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UScriptStruct_FWwiseExternalSourceCookieDefaultMedia@@YAPEAVUScriptStruct@@XZ
?Z_Construct_UScriptStruct_FWwiseExternalSourceMediaInfo@@YAPEAVUScriptStruct@@XZ
?__DefaultConstructor@UWwiseExternalSourceSettings@@SAXAEBVFObjectInitializer@@@Z
?__VTableCtorCaller@UWwiseExternalSourceSettings@@SAPEAVUObject@@AEAVFVTableHelper@@@Z
InitializeModule

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6b779b57446c4869dfa9f7ff1959747

Headers

DLL Characteristics

File Characteristics

Imports

unrealserver-core

unrealserver-coreuobject

unrealserver-engine

unrealserver-akaudio

unrealserver-wwiseconcurrency

unrealserver-wwisefilehandler

unrealserver-wwiseresourceloader

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.uedbg Size: 5KB - Virtual size: 4KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 5KB - Virtual size: 4KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 44KB - Virtual size: 43KB

.uedbg
Size: 5KB - Virtual size: 4KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 1KB - Virtual size: 1KB