gamelaunchhelper[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

gamelaunchhelper.exe
Size

89KB
MD5

c5e738dcac63b30e20e5c531ba6b2ecd
SHA1

ca61c186342643d8e07317e18b7b02a456177d08
SHA256

33e5f667c29fe037652a725846281efa6493ba9a65f32eb1d00caa4a67662557
SHA512

dbd60f7ce264dc563f4158f07b9d481af4ed259448cfc1bccd54a9d5e3d12a92334bc7cbe11e843881d388bebff9d44ce60a50ca5e8b1710bd66b2b5a1dbabf5
SSDEEP

1536:lXVJ7hts2csRknrW+RFRClsvuH9bUFgiYdjbDSoHyvd95JwZKBz+z+8:lFJ71duW8vuugnjbjHWdPJwZKBz+y8

Score

1^/10

Malware Config

Signatures

Files

gamelaunchhelper.exe
.exe windows:10 windows x64

3399ae54ce32d4531a82ec9bf87ab37f

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

16/02/2023, 20:11

Not After

31/01/2024, 20:11

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06/07/2010, 20:40

Not After

06/07/2025, 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

f1:a2:ca:12:06:06:c9:c6:66:48:10:88:5e:58:a5:64:0f:20:dd:b3:cd:b0:bc:25:bb:c4:f7:7f:5d:4b:84:d2
Signer

Actual PE Digest

f1:a2:ca:12:06:06:c9:c6:66:48:10:88:5e:58:a5:64:0f:20:dd:b3:cd:b0:bc:25:bb:c4:f7:7f:5d:4b:84:d2

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

api-ms-win-crt-runtime-l1-1-0

_errno
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_c_exit
abort
__p___wargv
_seh_filter_exe
terminate
__p___argc
_set_app_type
_exit
_configure_wide_argv
_initialize_wide_environment
exit
_get_initial_wide_environment
_cexit
_register_thread_local_exe_atexit_callback
_initterm
_initterm_e
_invalid_parameter_noinfo

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
__stdio_common_vswprintf
_set_fmode
__p__commode

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleExW
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
GetModuleFileNameA
GetModuleHandleW
GetProcAddress

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection
CreateSemaphoreExW
WaitForSingleObject
InitializeCriticalSectionEx
CreateMutexExW
OpenSemaphoreW
WaitForSingleObjectEx
ReleaseMutex
ReleaseSemaphore

api-ms-win-core-heap-l1-1-0

HeapFree
HeapAlloc
GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

GetLastError
RaiseException
SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

rpcrt4

UuidCreate

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-winrt-l1-1-0

RoInitialize

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader

api-ms-win-core-fibers-l1-1-0

FlsAlloc
FlsFree
FlsGetValue
FlsSetValue

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageFullName
GetPackagesByPackageFamily

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh
_calloc_base
_free_base
malloc
free
_set_new_mode

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventSetInformation
EventWriteTransfer

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

gameconfighelper

OpenGameConfigForPackage

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3399ae54ce32d4531a82ec9bf87ab37f

Code Sign

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00Certificate

Extended Key Usages

61:0c:52:4c:00:00:00:00:00:03Certificate

Key Usages

f1:a2:ca:12:06:06:c9:c6:66:48:10:88:5e:58:a5:64:0f:20:dd:b3:cd:b0:bc:25:bb:c4:f7:7f:5d:4b:84:d2Signer

Headers

DLL Characteristics

File Characteristics

Imports

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

rpcrt4

api-ms-win-core-registry-l1-1-1

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-appmodel-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-version-l1-1-1

api-ms-win-core-version-l1-1-0

gameconfighelper

Sections

.text Size: 44KB - Virtual size: 41KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 2KB

.pdata Size: 4KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 124B

33:00:00:05:00:27:d6:32:6f:43:73:7b:87:00:00:00:00:05:00
Certificate

61:0c:52:4c:00:00:00:00:00:03
Certificate

f1:a2:ca:12:06:06:c9:c6:66:48:10:88:5e:58:a5:64:0f:20:dd:b3:cd:b0:bc:25:bb:c4:f7:7f:5d:4b:84:d2
Signer

.text
Size: 44KB - Virtual size: 41KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 2KB

.pdata
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 124B