Automation Launcher Steam[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Automation Launcher Steam.exe
Size

5.2MB
MD5

e6b3684b67538c1b0a2fd319345956e3
SHA1

913df61ab3123f3f96feda77385a0af80e3c4d2b
SHA256

620726787eecc6aa386169cb5f6d7af5d6d768d928262918b80783e0d8a224de
SHA512

12de1498044e09afe3602247aee9f0810eb39cde4e7d43ed36daba6740073cd7f644494bf8ea165eb1d69d7a934cc8cc8f8270bfa62f2a0e593552cad1094eaf
SSDEEP

49152:de1fkjIDP9A1fkjIDP9NqBWCXgz8UdgNdB9WdioedEp8A/jfE7/hmuLxDZDhOzP:6fkjbfkj4O6dZedungF11NDhO7

Score

N/A

Malware Config

Signatures

Files

Automation Launcher Steam.exe
.exe windows x86

Password: gg

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

98:8d:a1:fe:d2:b4:30:d2:a8:77:00:86:c2:5b:7b:1f
Certificate

Issuer

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

05/03/2020, 00:00

Not After

05/03/2021, 23:59

Subject

CN=Camshaft Software LTD,O=Camshaft Software LTD,POSTALCODE=5012,STREET=Room 150\,+STREET=57 Cuba St,L=Lower Hutt,ST=Wellington,C=NZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/11/2018, 00:00

Not After

31/12/2030, 23:59

Subject

CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

cc:d1:fd:28:5c:3a:21:04:c7:35:8b:fa:75:88:df:ac:a2:e8:e6:21
Signer

Actual PE Digest

cc:d1:fd:28:5c:3a:21:04:c7:35:8b:fa:75:88:df:ac:a2:e8:e6:21

Digest Algorithm

sha1

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Camshaft Software LTD,O=Camshaft Software LTD,POSTALCODE=5012,STREET=Room 150\,+STREET=57 Cuba St,L=Lower Hutt,ST=Wellington,C=NZ

15/12/2022, 13:59
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: gg

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

98:8d:a1:fe:d2:b4:30:d2:a8:77:00:86:c2:5b:7b:1fCertificate

Extended Key Usages

Key Usages

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6aCertificate

Extended Key Usages

Key Usages

cc:d1:fd:28:5c:3a:21:04:c7:35:8b:fa:75:88:df:ac:a2:e8:e6:21Signer

Signature Validations

Verification

15/12/2022, 13:59 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5.2MB - Virtual size: 5.2MB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 12B

98:8d:a1:fe:d2:b4:30:d2:a8:77:00:86:c2:5b:7b:1f
Certificate

1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Certificate

cc:d1:fd:28:5c:3a:21:04:c7:35:8b:fa:75:88:df:ac:a2:e8:e6:21
Signer

15/12/2022, 13:59
Valid: false

.text
Size: 5.2MB - Virtual size: 5.2MB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 12B