D:\SourceCode\GameLibrary\production_V5.9\Service\ServiceSDK\Release\GameLibraryPlugin\GameLauncher.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f8b15d12331cd3655eaef0628f67de1f742945e880ea286ed6ae44ff41cb031e.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f8b15d12331cd3655eaef0628f67de1f742945e880ea286ed6ae44ff41cb031e.exe
Resource
win10v2004-20241007-en
General
-
Target
f8b15d12331cd3655eaef0628f67de1f742945e880ea286ed6ae44ff41cb031e
-
Size
597KB
-
MD5
790d1d825f96ce0a9daed7c88e199fe4
-
SHA1
ebc8b92af40e35bdbb154db0d32c5a2cb2449908
-
SHA256
f8b15d12331cd3655eaef0628f67de1f742945e880ea286ed6ae44ff41cb031e
-
SHA512
b6fb0d4a2333675977158a2410c5d4dd905d32c6ed722ec834184702b105da751fa5fa42ea87914045e5ee0692c854fd5593b26a4395f6c93c1f886c49daa595
-
SSDEEP
12288:kuK5OjSX3CVlqNYuAX8DeBJT18Xzo3GpzO+xZRzbfnXAFSZHSow6G:kuK5SSiVw6uAX8DS52tpz9ZRzbPmSZyo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f8b15d12331cd3655eaef0628f67de1f742945e880ea286ed6ae44ff41cb031e
Files
-
f8b15d12331cd3655eaef0628f67de1f742945e880ea286ed6ae44ff41cb031e.exe windows:6 windows x64 arch:x64
e8cb2c7696b21106ef8a6dbe23c19581
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
shlwapi
PathFindExtensionW
PathFileExistsW
kernel32
RtlCaptureContext
RtlLookupFunctionEntry
GetCommandLineW
GetCurrentProcess
InitializeCriticalSectionEx
GetEnvironmentVariableA
GetLastError
DeleteCriticalSection
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OutputDebugStringW
GetSystemTimeAsFileTime
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
GetModuleHandleW
InitializeSListHead
IsDebuggerPresent
GetCurrentThreadId
QueryPerformanceCounter
GetCurrentProcessId
shell32
CommandLineToArgvW
ShellExecuteW
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140
memmove
__std_exception_copy
memcpy
memset
__C_specific_handler
_CxxThrowException
__std_exception_destroy
__CxxFrameHandler3
memcmp
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-heap-l1-1-0
free
_callnewh
_set_new_mode
malloc
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_c_exit
_register_thread_local_exe_atexit_callback
_exit
exit
terminate
_cexit
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_get_narrow_winmain_command_line
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_configure_narrow_argv
_set_app_type
_seh_filter_exe
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE