NEAS[.]dae1147d2a2ecc696feb43080730e1c0_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dae1147d2a2ecc696feb43080730e1c0_JC.exe
Size

117KB
MD5

dae1147d2a2ecc696feb43080730e1c0
SHA1

a56cbc7e0ac677e93978d3aab489edc4d5334844
SHA256

1212d3f063b52c1ccf3c013e6e405f5737e5fb5a8b3c78557b94b8c7f9d230e3
SHA512

76c1a27f26bab0a7570c713bdbd75f3af9546f1364132e0a2a91a21a04d023224904189b697ef3cdef09fb816abfe40368148b1e33e0e07257df1324fa7d9c1c
SSDEEP

1536:1j1I2skCUpP8gFiKY6rwhWWroO9esIXq9eFHUAf9HeIMTWmg9Ppki6EPAyVF:h5CyP/Y68MWroO9caMFHt1BWg9RkkBz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dae1147d2a2ecc696feb43080730e1c0_JC.exe

Files

NEAS.dae1147d2a2ecc696feb43080730e1c0_JC.exe
.dll windows:6 windows x64

6f89853b8ea8f3e5bede76e10545efcc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

factorygame-core

??1FLogCategoryBase@@QEAA@XZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?IsEnsureAllowed@FGenericPlatformMisc@@SA_NXZ
?GetPlatformUserForUserIndex@FGenericPlatformMisc@@SA?AUFPlatformUserId@@H@Z
?IsDebuggerPresent@FWindowsPlatformMisc@@SA_NXZ
?PromptForRemoteDebugging@FWindowsPlatformMisc@@SAX_N@Z
?CheckVerifyFailedImpl@FDebug@@SAXPEBD0HPEAXPEB_WZZ
?OptionallyLogFormattedEnsureMessageReturningFalseImpl@FDebug@@CA_N_NPEBD1HPEAXPEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FString@@QEAA@AEBV0@@Z
??0FString@@QEAA@PEB_W@Z
??1FString@@QEAA@XZ
?GetTypeHash@@YAIUFNameEntryId@@@Z
?GetPlainANSIString@FName@@QEBAXAEAY0EAA@D@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?BasicLog@Private@Logging@UE@@YAXAEBUFLogCategoryBase@@PEBUFStaticBasicLogRecord@123@ZZ
?GetSecondsPerCycle@FGenericPlatformTime@@SANXZ
?GetDouble@FConfigCacheIni@@QEAA_NPEB_W0AEANAEBVFString@@@Z
?Get@IModularFeatures@@SAAEAV1@XZ
?GIgnoreDebugger@@3_NA
?GConfig@@3PEAVFConfigCacheIni@@EA
?GInputIni@@3VFString@@A
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
?OnInvalidArrayNum@UE4Array_Private@@YAXPEB_W_K@Z
?Free@FMemory@@SAXPEAX@Z

factorygame-coreuobject

?InternalCreateDefaultObjectWrapper@UClass@@AEBAXXZ

factorygame-applicationcore

?Get@IPlatformInputDeviceMapper@@SAAEAV1@XZ
??1FInputDeviceScope@@QEAA@XZ
??0FInputDeviceScope@@QEAA@PEAVIInputDevice@@VFName@@HVFString@@@Z

factorygame-engine

?GetPrivateStaticClass@UInputSettings@@CAPEAVUClass@@XZ
?GetActionNames@UInputSettings@@QEBAXAEAV?$TArray@VFName@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetAxisNames@UInputSettings@@QEBAXAEAV?$TArray@VFName@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetActionMappings@UInputSettings@@QEBAAEBV?$TArray@UFInputActionKeyMapping@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?GetAxisMappings@UInputSettings@@QEBAAEBV?$TArray@UFInputAxisKeyMapping@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ

factorygame-steamshared

?Get@FSteamSharedModule@@SAAEAV1@XZ
?ObtainSteamClientInstanceHandle@FSteamSharedModule@@QEAA?AV?$TSharedPtr@VFSteamClientInstanceHandler@@$00@@XZ

factorygame-inputcore

?Gamepad_RightX@EKeys@@2UFKey@@B
?Gamepad_RightTriggerAxis@EKeys@@2UFKey@@B
?Gamepad_LeftTriggerAxis@EKeys@@2UFKey@@B
?IsGamepadKey@FKey@@QEBA_NXZ
?GetFName@FKey@@QEBA?AVFName@@XZ
??1FKey@@QEAA@XZ
??0FKey@@QEAA@AEBU0@@Z
?MouseX@EKeys@@2UFKey@@B
?MouseY@EKeys@@2UFKey@@B
?Gamepad_LeftX@EKeys@@2UFKey@@B
?Gamepad_LeftY@EKeys@@2UFKey@@B
?Gamepad_RightY@EKeys@@2UFKey@@B

kernel32

QueryPerformanceCounter
RaiseException
GetLastError
GetSystemInfo
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryExA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeSListHead
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle

vcruntime140

_purecall
memmove
__C_specific_handler
memcpy
__current_exception
__current_exception_context
memset
__std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
terminate
_crt_atexit

Exports

Exports

InitializeModule

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uedbg
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 59KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f89853b8ea8f3e5bede76e10545efcc

Headers

DLL Characteristics

File Characteristics

Imports

factorygame-core

factorygame-coreuobject

factorygame-applicationcore

factorygame-engine

factorygame-steamshared

factorygame-inputcore

kernel32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.uedbg Size: 2KB - Virtual size: 2KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 59KB - Virtual size: 58KB

.reloc Size: 512B - Virtual size: 256B

.text
Size: 36KB - Virtual size: 35KB

.uedbg
Size: 2KB - Virtual size: 2KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 59KB - Virtual size: 58KB

.reloc
Size: 512B - Virtual size: 256B