UnrealEngine[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

UnrealEngine.dll
Size

113KB
MD5

8a3c0e13c33cca9a00f4171d2881eadd
SHA1

241e7368bed2edcb93f3fd7d0e06d506770f5432
SHA256

f5775a0c5e888266644eae52d07342ea38981419e9fcb9a1a43a8a96ad760bf0
SHA512

eef79869ac8c2d7393c987c0e938ba9e0e13428849e982f20146e82a46072c94905983c8f9bc43e97d7b23bac56eabd9122863223042b5ca132d8406182722b0
SSDEEP

1536:qZZAqNrujbhO2+sKJjzgF2OhKcZG5QNQdQryrsc0TFhyzDE:q9NreA2pcjzitdZGyGscvzg

Score

1^/10

Malware Config

Signatures

Files

UnrealEngine.dll
.dll windows:6 windows x64 arch:x64

6fd89dec1f6b1f57aea8a386845d5d3c

Code Sign

0d:68:3e:6a:d0:cd:a9:b4:47:5c:f8:ae:1d:7d:21:33
Certificate

Issuer

CN=BattlEye Innovations e.K.,OU=Certification Authority,O=BattlEye Innovations e.K.,L=Basingstoke,ST=Hampshire,C=GB,1.2.840.113549.1.9.1=#0c15426174746c45796540426174746c4579652e636f6d

Not Before

01/01/2015, 00:00

Not After

01/01/2088, 00:00

Subject

CN=BattlEye Innovations e.K.,OU=Code Management,O=BattlEye Innovations e.K.,L=Basingstoke,ST=BattlEye Innovations e.K.,C=GB,1.2.840.113549.1.9.1=#0c15426174746c45796540426174746c4579652e636f6d

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
ExtKeyUsageMicrosoftCommercialCodeSigning

Key Usages

KeyUsageDigitalSignature

f5:72:df:e8:10:4f:00:04:1d:fb:42:55:8f:12:1f:52:68:7a:5e:3d
Signer

Actual PE Digest

f5:72:df:e8:10:4f:00:04:1d:fb:42:55:8f:12:1f:52:68:7a:5e:3d

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\x\Desktop\ETERNAL NEW\Internal\x64\Release\UnrealEngine.pdb

Imports

user32

CallNextHookEx

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
_CxxThrowException
__std_exception_destroy
__std_type_info_destroy_list
memcpy
__std_exception_copy
memset

api-ms-win-crt-math-l1-1-0

round

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_seh_filter_dll
_initialize_onexit_table
_initterm_e
_initterm
_execute_onexit_table
_cexit
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

kernel32

InitializeSListHead
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
IsDebuggerPresent
ReleaseSRWLockExclusive
GetSystemTimeAsFileTime
GetCurrentThreadId

Exports

Exports

BattlEye

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fd89dec1f6b1f57aea8a386845d5d3c

Code Sign

0d:68:3e:6a:d0:cd:a9:b4:47:5c:f8:ae:1d:7d:21:33Certificate

Extended Key Usages

Key Usages

f5:72:df:e8:10:4f:00:04:1d:fb:42:55:8f:12:1f:52:68:7a:5e:3dSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

user32

vcruntime140_1

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 4KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 100B

0d:68:3e:6a:d0:cd:a9:b4:47:5c:f8:ae:1d:7d:21:33
Certificate

f5:72:df:e8:10:4f:00:04:1d:fb:42:55:8f:12:1f:52:68:7a:5e:3d
Signer

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 100B