FactoryGameEGS-NISBlueprint.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bd5c0d7130993fe68cc3970194d7234a2f5c2ba00a53a5a1cece8dc40bd08383.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
bd5c0d7130993fe68cc3970194d7234a2f5c2ba00a53a5a1cece8dc40bd08383.dll
Resource
win10v2004-20240508-en
General
-
Target
bd5c0d7130993fe68cc3970194d7234a2f5c2ba00a53a5a1cece8dc40bd08383
-
Size
111KB
-
MD5
201760c6e7069ed39f2f225ab99155a6
-
SHA1
afc60a3c6296f6e63b7b9b69728cf374f0d7f806
-
SHA256
bd5c0d7130993fe68cc3970194d7234a2f5c2ba00a53a5a1cece8dc40bd08383
-
SHA512
01ae3645a435c97a073933945ebe31d3bd0001130a48f330acb11a5f7e4cec13ad05f584c6428e61918b8fa857830987bfcacca9d51605c0db012661b54f6130
-
SSDEEP
3072:Wn176nONRPxfcwO9caMFHt1BWg9RkkBz:WB60PxfzRZUmR/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd5c0d7130993fe68cc3970194d7234a2f5c2ba00a53a5a1cece8dc40bd08383
Files
-
bd5c0d7130993fe68cc3970194d7234a2f5c2ba00a53a5a1cece8dc40bd08383.dll windows:6 windows x64 arch:x64
cd84ac6003121dbb2ec178409cc80813
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
factorygameegs-core
?HandleAtomicsFailure@FWindowsPlatformAtomics@@KAXPEB_WZZ
?Free@FMemory@@SAXPEAX@Z
??0FName@@QEAA@PEB_WW4EFindName@@@Z
??0FName@@QEAA@PEBDW4EFindName@@@Z
??0FLogCategoryBase@@QEAA@AEBVFName@@W4Type@ELogVerbosity@@1@Z
??1FLogCategoryBase@@QEAA@XZ
?DoSetup@FThreadSafeStaticStatBase@@IEBAPEBUTStatIdData@@PEBDPEB_W001_N2W4Type@EStatDataType@@22W4EMemoryCounterRegion@FWindowsPlatformMemory@@@Z
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPathDebug@Private@CoreUObject@UE@@EA
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?CheckVerifyFailedImpl@FDebug@@SA_NPEBD0HPEAXPEB_WZZ
?CheckVerifyImpl@@YA_NAEA_N_NPEBDHPEAX2PEB_WZZ
?Malloc@FMemory@@SAPEAX_KI@Z
?Realloc@FMemory@@SAPEAXPEAX_KI@Z
?QuantizeSize@FMemory@@SA_K_KI@Z
?OnInvalidArrayNum@Private@Core@UE@@YAX_K@Z
?ResizeAllocation@ForAnyElementType@?$TSizedHeapAllocator@$0CA@UFMemory@@@@QEAAXHH_KI@Z
??0FString@@QEAA@PEB_W@Z
?PrintfImpl@FString@@CA?AV1@PEB_WZZ
?FromValidEName@FNameEntryId@@CA?AU1@W4EName@@@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?IsInGameThread@@YA_NXZ
?IsInParallelGameThread@@YA_NXZ
?IsInActualRenderingThread@@YA_NXZ
?ToString@FText@@QEBAAEBVFString@@XZ
?SetupSingleton@IConsoleManager@@CAXXZ
?AccessGeneralShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AccessMobileShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?AccessDesktopShaderChangeCvars@FAutoConsoleObject@@SAAEAV?$TArray@PEBVFAutoConsoleObject@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?Singleton@IConsoleManager@@0PEAU1@EA
factorygameegs-coreuobject
?GetTransientPackage@@YAPEAVUPackage@@XZ
?StaticAllocateObject@@YAPEAVUObject@@PEBVUClass@@PEAV1@VFName@@W4EObjectFlags@@W4EInternalObjectFlags@@_NPEA_NPEAVUPackage@@@Z
?Get@FObjectInitializer@@SAAEAV1@XZ
?ConstructUFunction@UECodeGen_Private@@YAXPEAPEAVUFunction@@AEBUFFunctionParams@1@@Z
?ConstructUEnum@UECodeGen_Private@@YAXAEAPEAVUEnum@@AEBUFEnumParams@1@@Z
?ConstructUPackage@UECodeGen_Private@@YAXAEAPEAVUPackage@@AEBUFPackageParams@1@@Z
?ConstructUClass@UECodeGen_Private@@YAXAEAPEAVUClass@@AEBUFClassParams@1@@Z
?GetStaticEnum@@YAPEAVUEnum@@P6APEAV1@XZPEAVUObject@@PEB_W@Z
?RegisterCompiledInInfo@@YAXP6APEAVUPackage@@XZPEB_WAEAU?$TRegistrationInfo@VUPackage@@UFPackageReloadVersionInfo@@@@AEBUFPackageReloadVersionInfo@@@Z
?RegisterCompiledInInfo@@YAXPEB_WPEBUFClassRegisterCompiledInInfo@@_KPEBUFStructRegisterCompiledInInfo@@2PEBUFEnumRegisterCompiledInInfo@@2@Z
?GetFullName@UObjectBaseUtility@@QEBA?AVFString@@PEBVUObject@@W4EObjectFullNameFlags@@@Z
?GetPrivateStaticClass@UObject@@CAPEAVUClass@@XZ
?AddReferencedObjects@UObject@@SAXPEAV1@AEAVFReferenceCollector@@@Z
?CallFunctionByNameWithArguments@UObject@@QEAA_NPEB_WAEAVFOutputDevice@@PEAV1@_N@Z
?RegisterFunctions@FNativeFunctionRegistrar@@SAXPEAVUClass@@PEBUFNameNativePtrPair@@H@Z
?GetDisplayNameTextByValue@UEnum@@QEBA?AVFText@@_J@Z
?GetMaxEnumValue@UEnum@@QEBA_JXZ
?IsValidEnumValue@UEnum@@QEBA_N_J@Z
?GetPrivateStaticClassBody@@YAXPEB_W0AEAPEAVUClass@@P6AXXZIIW4EClassFlags@@W4EClassCastFlags@@0P6AXAEBVFObjectInitializer@@@ZP6APEAVUObject@@AEAVFVTableHelper@@@Z$$QEAUFUObjectCppClassStaticFunctions@@P6APEAV1@XZP6APEAV1@XZ@Z
?StaticClass@FFloatProperty@@SAPEAVFFieldClass@@XZ
?StaticClass@FEnumProperty@@SAPEAVFFieldClass@@XZ
?Step@FFrame@@QEAAXPEAVUObject@@QEAX@Z
?StepExplicitProperty@FFrame@@QEAAXQEAXPEAVFProperty@@@Z
?KismetExecutionMessage@FFrame@@SAXPEB_WW4Type@ELogVerbosity@@VFName@@@Z
?CheckDefaultSubobjectsInternal@UObject@@MEBA_NXZ
?ProcessEvent@UObject@@UEAAXPEAVUFunction@@PEAX@Z
?BuildSubobjectMapping@UObject@@UEBAXPEAV1@AEAV?$TMap@PEAVUObject@@PEAV1@VFDefaultSetAllocator@@U?$TDefaultMapHashableKeyFuncs@PEAVUObject@@PEAV1@$0A@@@@@@Z
?PreDestroyFromReplication@UObject@@UEAAXXZ
?PostNetReceive@UObject@@UEAAXXZ
?PreNetReceive@UObject@@UEAAXXZ
?IsSupportedForNetworking@UObject@@UEBA_NXZ
?IsFullNameStableForNetworking@UObject@@UEBA_NXZ
?IsNameStableForNetworking@UObject@@UEBA_NXZ
?RegisterReplicationFragments@UObject@@UEAAXAEAVFFragmentRegistrationContext@Net@UE@@W4EFragmentRegistrationFlags@34@@Z
?GetReplicatedCustomConditionState@UObject@@UEBAXAEAVFCustomPropertyConditionState@@@Z
?GetLifetimeReplicatedProps@UObject@@UEBAXAEAV?$TArray@VFLifetimeProperty@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?TagSubobjects@UObject@@UEAAXW4EObjectFlags@@@Z
?IsSafeForRootSet@UObject@@UEBA_NXZ
?IsLocalizedResource@UObject@@UEBA_NXZ
?GetPrimaryAssetId@UObject@@UEBA?AUFPrimaryAssetId@@XZ
?IsAsset@UObject@@UEBA_NXZ
?GetAssetRegistryTags@UObject@@UEBAXAEAV?$TArray@UFAssetRegistryTag@UObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?GetResourceSizeEx@UObject@@UEAAXAEAUFResourceSizeEx@@@Z
?GetWorld@UObject@@UEBAPEAVUWorld@@XZ
?Rename@UObject@@UEAA_NPEB_WPEAV1@I@Z
?GetPreloadDependencies@UObject@@UEAAXAEAV?$TArray@PEAVUObject@@V?$TSizedDefaultAllocator@$0CA@@@@@@Z
?IsDestructionThreadSafe@UObject@@UEBA_NXZ
?NeedsLoadForTargetPlatform@UObject@@UEBA_NPEBVITargetPlatform@@@Z
?NeedsLoadForServer@UObject@@UEBA_NXZ
?NeedsLoadForClient@UObject@@UEBA_NXZ
?Serialize@UObject@@UEAAXAEAVFArchive@@@Z
?Serialize@UObject@@UEAAXVFStructuredArchiveRecord@@@Z
?FinishDestroy@UObject@@UEAAXXZ
?BeginDestroy@UObject@@UEAAXXZ
?PostLoadSubobjects@UObject@@UEAAXPEAUFObjectInstancingGraph@@@Z
?PostLoad@UObject@@UEAAXXZ
?PreSave@UObject@@UEAAXPEBVITargetPlatform@@@Z
?PreSave@UObject@@UEAAXVFObjectPreSaveContext@@@Z
?PostSaveRoot@UObject@@UEAAX_N@Z
?PostSaveRoot@UObject@@UEAAXVFObjectPostSaveRootContext@@@Z
?PreSaveRoot@UObject@@UEAA_NPEB_W@Z
?PreSaveRoot@UObject@@UEAAXVFObjectPreSaveRootContext@@@Z
?PostReinitProperties@UObject@@UEAAXXZ
?PostInitProperties@UObject@@UEAAXXZ
?CreateCluster@UObjectBaseUtility@@UEAAXXZ
?CanBeInCluster@UObjectBaseUtility@@UEBA_NXZ
?GetFNameForStatID@UObjectBase@@UEBA?AVFName@@XZ
?DeferredRegister@UObjectBase@@MEAAXPEAVUClass@@PEB_W1@Z
factorygameegs-engine
?GetPrivateStaticClass@UBlueprintFunctionLibrary@@CAPEAVUClass@@XZ
??0UBlueprintFunctionLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??0UBlueprintFunctionLibrary@@QEAA@AEAVFVTableHelper@@@Z
??1UBlueprintFunctionLibrary@@UEAA@XZ
?Z_Construct_UClass_UBlueprintFunctionLibrary@@YAPEAVUClass@@XZ
?GetFunctionCallspace@UBlueprintFunctionLibrary@@UEAAHPEAVUFunction@@PEAUFFrame@@@Z
factorygameegs-nisshaders
?GetNISMinRequiredFeatureLevel@@YA?AW4Type@ERHIFeatureLevel@@XZ
factorygameegs-rhi
?GMaxRHIFeatureLevel@@3W4Type@ERHIFeatureLevel@@A
vcruntime140
__current_exception_context
__current_exception
memset
__C_specific_handler
__std_type_info_destroy_list
memcpy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-math-l1-1-0
logf
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_execute_onexit_table
_initterm
_crt_at_quick_exit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
terminate
_register_onexit_function
_initialize_onexit_table
kernel32
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
IsDebuggerPresent
UnhandledExceptionFilter
WakeAllConditionVariable
Exports
Exports
??$StaticClass@VUNISLibrary@@@@YAPEAVUClass@@XZ
??$StaticEnum@W4UNISMode@@@@YAPEAVUEnum@@XZ
??$StaticEnum@W4UNISSupport@@@@YAPEAVUEnum@@XZ
??0UNISLibrary@@QEAA@AEAVFVTableHelper@@@Z
??0UNISLibrary@@QEAA@AEBVFObjectInitializer@@@Z
??1UNISLibrary@@UEAA@XZ
??_FUNISLibrary@@QEAAXXZ
?GetDefaultNISMode@UNISLibrary@@SA?AW4UNISMode@@XZ
?GetNISRecommendedScreenPercentage@UNISLibrary@@SAMW4UNISMode@@@Z
?GetNISScreenPercentageRange@UNISLibrary@@SAXAEAM0@Z
?GetPrivateStaticClass@UNISLibrary@@CAPEAVUClass@@XZ
?GetSupportedNISModes@UNISLibrary@@SA?AV?$TArray@W4UNISMode@@V?$TSizedDefaultAllocator@$0CA@@@@@XZ
?IsNISModeSupported@UNISLibrary@@SA_NW4UNISMode@@@Z
?IsNISSupported@UNISLibrary@@SA_NXZ
?SetNISCustomScreenPercentage@UNISLibrary@@SAXM@Z
?SetNISMode@UNISLibrary@@SAXW4UNISMode@@@Z
?SetNISSharpness@UNISLibrary@@SAXM@Z
?Z_Construct_UClass_UNISLibrary@@YAPEAVUClass@@XZ
?Z_Construct_UClass_UNISLibrary_NoRegister@@YAPEAVUClass@@XZ
?Z_Construct_UEnum_NISBlueprint_UNISMode@@YAPEAVUEnum@@XZ
?Z_Construct_UEnum_NISBlueprint_UNISSupport@@YAPEAVUEnum@@XZ
InitializeModule
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.uedbg Size: 512B - Virtual size: 487B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ