SteamEmu[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

SteamEmu.rar
Size

2.8MB
MD5

7e027916e039dc600d34b8eb2f0c708a
SHA1

c825ee9b415b62a8412ddaecec52a9b87e8528fa
SHA256

5bb7d7f0f576a18e5ceb1a37ce45613e09971af2a3a1e62fb4990c201a024809
SHA512

71472e0b8510e7f991d6e524961609c7c16bffdf6619ce43520b5cd97e250ff512f73f4e745d06b47a4d820c33e44dfd10b6922c99928a1ae83779f1cefc0089
SSDEEP

49152:BIt1iXBNmfEIBHZDsGo/F+t4h2P1jxfpdPER3YPAFr/s2Sss8kuBSH:BItxtYPtgIujPERoIFgOLoH

Score

1^/10

Malware Config

Signatures

Files

SteamEmu.rar
.rar
SSELauncher.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SmartSteamEmu/SmartSteamEmu.dll
.dll windows x86

76758693642954b62393e3cd485bfb66

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateThread
TerminateThread
CreateEventW
WaitForSingleObject
CloseHandle
SetEvent
Sleep
InterlockedExchange
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileW
ReadFile
GetCurrentProcessId
GetCurrentThreadId
WaitForMultipleObjects
CreateFileA
WriteFile
FindClose
GetFileSize
MoveFileW
GetExitCodeThread
InterlockedExchangeAdd
ExpandEnvironmentStringsW
CreateDirectoryW
FindFirstFileW
FindNextFileW
DeleteFileW
ResetEvent
GetSystemPowerStatus
LoadLibraryW
GetProcAddress
FreeLibrary
FormatMessageA
GetLastError
LocalFree
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetComputerNameW
WritePrivateProfileStringW
CopyFileW
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
WideCharToMultiByte
MultiByteToWideChar
WaitNamedPipeW
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
TryEnterCriticalSection
SetFilePointer
GetModuleHandleExW
GetModuleHandleA
EnterCriticalSection
GetSystemDirectoryW
CreateProcessW
DeviceIoControl
GetVersionExW
GetWindowsDirectoryA
HeapCreate
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
LeaveCriticalSection
InterlockedCompareExchange
GetTickCount
GetModuleFileNameW
DisableThreadLibraryCalls
IsBadReadPtr
GetStringTypeW
GetFileInformationByHandle
CompareStringW
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetModuleFileNameA
GetCurrentDirectoryW
GetFullPathNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
GetProcessHeap
SetEndOfFile
GetConsoleMode
GetConsoleCP
SetStdHandle
FindFirstFileExA
GetDriveTypeA
HeapSize
IsProcessorFeaturePresent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCPInfo
LCMapStringW
RtlUnwind
RaiseException
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetFullPathNameA
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitThread
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
CreateDirectoryA
VirtualQuery
GetCurrentProcess
FlushInstructionCache
VirtualProtect
SetUnhandledExceptionFilter
GetModuleHandleW
HeapAlloc
HeapFree
GetEnvironmentVariableA
lstrcmpW
SignalObjectAndWait
GetThreadPriority
GetPriorityClass
ResumeThread
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjectsEx
CancelWaitableTimer
GetVersionExA
GlobalFree
GlobalAlloc
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
PeekNamedPipe
SleepEx
SetLastError
VerSetConditionMask
VerifyVersionInfoA
LoadLibraryA
SetThreadPriority
WaitForSingleObjectEx
CreateEventA
ExitProcess
DecodePointer
EncodePointer
HeapDestroy

user32

GetWindowThreadProcessId
GetAsyncKeyState
GetForegroundWindow

advapi32

CryptGetHashParam
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
GetUserNameW
GetCurrentHwProfileA
RegCloseKey
RegQueryValueExW
CryptDestroyHash

shell32

SHGetFolderPathW

ws2_32

getaddrinfo
freeaddrinfo
getpeername
WSASetLastError
WSAIoctl
__WSAFDIsSet
accept
listen
WSACleanup
getsockname
getsockopt
gethostname
WSAStartup
ntohs
WSAGetLastError
setsockopt
bind
select
htons
connect
gethostbyname
ioctlsocket
socket
inet_addr
inet_ntoa
closesocket
recv
recvfrom
send
sendto
ntohl
htonl

secur32

GetUserNameExW

wldap32

ord35
ord79
ord200
ord33
ord301
ord27
ord41
ord46
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord32

normaliz

IdnToAscii

winmm

waveInAddBuffer
waveInUnprepareHeader
waveOutUnprepareHeader
waveInClose
waveOutClose
waveOutGetDevCapsA
waveOutMessage
waveInGetDevCapsA
waveInMessage
waveOutWrite
waveOutGetErrorTextA
waveInOpen
waveInPrepareHeader
timeEndPeriod
timeBeginPeriod
timeGetTime
waveOutGetNumDevs
waveOutGetPosition
waveInGetNumDevs
waveOutRestart
waveOutPause
waveInStart
waveInReset
waveOutReset
waveOutOpen
waveOutPrepareHeader
waveInGetErrorTextA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceAlias
SetupDiOpenDeviceInterfaceRegKey

ole32

CoTaskMemFree
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitializeEx
PropVariantClear
CoCreateInstance
CoInitialize

Exports

Exports

Breakpad_SetSteamID
Breakpad_SteamMiniDumpInit
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
GetHSteamPipe
GetHSteamUser
GetSSeApi
InitSSE
MySteamAPI_RegisterCallResult
MySteamAPI_RegisterCallback
MySteamAPI_UnregisterCallResult
MySteamAPI_UnregisterCallback
SSECreateProcess
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAppList
SteamApps
SteamCheckAppOwnership
SteamCleanup
SteamClient
SteamController
SteamController_GetControllerState
SteamController_Init
SteamController_SetOverrideMode
SteamController_Shutdown
SteamController_TriggerHapticPulse
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUGC
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamGetLocalClientVersion
SteamGetVersion
SteamHTMLSurface
SteamHTTP
SteamInventory
SteamIsAppSubscribed
SteamIsLoggedIn
SteamIsSubscribed
SteamLogin
SteamLogout
SteamMatchmaking
SteamMatchmakingServers
SteamMusic
SteamMusicRemote
SteamNetworking
SteamRemoteStorage
SteamShutdownEngine
SteamShutdownSteamBridgeInterface
SteamStartEngine
SteamStartEngineEx
SteamStartup
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
SteamVideo
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_GetHSteamUserCurrent
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_RegisterInterfaceFuncs
Steam_ReleaseUser
Steam_RunCallbacks
Steam_SetLocalIPBinding
Steam_TerminateGameConnection
g_pSteamClientGameServer

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 476KB - Virtual size: 476KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SmartSteamEmu/SmartSteamEmu.ini
SmartSteamEmu/SmartSteamEmu.txt
SmartSteamEmu/SmartSteamEmu/Common/620/items.bin
SmartSteamEmu/SmartSteamEmu/Common/730/items.bin
SmartSteamEmu/SmartSteamEmu/Common/Readme.txt
SmartSteamEmu/SmartSteamEmu/Common/avatar.png
.png
SmartSteamEmu/SmartSteamEmu/Plugins/x64/SSEOverlay.dll
.dll windows x64

6ae091edc01e441c434a010ef1e261c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetModuleHandleW
GetTickCount
GetSystemDirectoryA
LoadLibraryA
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
CreateFileW
GetFileSize
ReadFile
CloseHandle
WriteFile
CreateThread
MulDiv
GetCurrentProcessId
GetModuleHandleA
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
GetModuleFileNameW
FlushFileBuffers
GetProcAddress
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
GetCPInfo
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
HeapSize
GetTimeZoneInformation
GetStdHandle
SetEnvironmentVariableA

user32

ScreenToClient
GetCursorInfo
GetWindowThreadProcessId
SetCursor
ShowCursor
GetCursor
ToUnicode
GetKeyboardState
UnregisterClassW
DestroyWindow
GetDesktopWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
ClientToScreen
GetClientRect
GetForegroundWindow
GetActiveWindow

gdi32

GetStockObject

Exports

Exports

SmartCallbackFilter
SmartInit
SmartRunFrame
SmartShutdown

Sections

.text
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SmartSteamEmu/SmartSteamEmu/Plugins/x86/SSEOverlay.dll
.dll windows x86

8ad334721cf3b1fe1a9e65f8629946d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetTickCount
GetSystemDirectoryA
LoadLibraryA
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
CreateFileW
GetFileSize
ReadFile
CloseHandle
WriteFile
CreateThread
MulDiv
GetCurrentProcessId
GetModuleHandleA
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetModuleFileNameA
GetFileType
GetOEMCP
GetACP
IsValidCodePage
GetProcessHeap
GetModuleFileNameW
FlushFileBuffers
GetProcAddress
WideCharToMultiByte
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
GetSystemTimeAsFileTime
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsDebuggerPresent
ExitProcess
GetModuleHandleExW
HeapSize
GetTimeZoneInformation
GetStdHandle
SetEnvironmentVariableA

user32

ScreenToClient
GetCursorInfo
GetWindowThreadProcessId
SetCursor
ShowCursor
GetCursor
ToUnicode
GetKeyboardState
UnregisterClassW
DestroyWindow
GetDesktopWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DefWindowProcW
ClientToScreen
GetClientRect
GetForegroundWindow
GetActiveWindow

gdi32

GetStockObject

Exports

Exports

SmartCallbackFilter
SmartInit
SmartRunFrame
SmartShutdown

Sections

.text
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SmartSteamEmu/SmartSteamEmu64.dll
.dll windows x64

343a480494890f4fc077324fd139cb22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
CreateThread
TerminateThread
CreateEventW
WaitForSingleObject
CloseHandle
SetEvent
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileW
ReadFile
GetCurrentProcessId
GetCurrentThreadId
WaitForMultipleObjects
CreateFileA
WriteFile
FindClose
GetFileSize
MoveFileW
GetExitCodeThread
ExpandEnvironmentStringsW
CreateDirectoryW
FindFirstFileW
FindNextFileW
DeleteFileW
ResetEvent
GetSystemPowerStatus
LoadLibraryW
GetProcAddress
FreeLibrary
FormatMessageA
GetLastError
LocalFree
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetComputerNameW
WritePrivateProfileStringW
CopyFileW
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
WideCharToMultiByte
MultiByteToWideChar
WaitNamedPipeW
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
TryEnterCriticalSection
SetFilePointer
GetModuleHandleExW
GetModuleHandleA
SetUnhandledExceptionFilter
GetSystemDirectoryW
CreateProcessW
GetCurrentThread
GetVersionExW
GetWindowsDirectoryA
CompareStringW
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetModuleFileNameW
DisableThreadLibraryCalls
IsBadReadPtr
GetLocaleInfoA
GetUserDefaultLCID
GetModuleFileNameA
GetCurrentDirectoryW
GetFullPathNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
GetProcessHeap
SetEndOfFile
GetConsoleMode
GetConsoleCP
SetStdHandle
HeapSize
FlsAlloc
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetStringTypeW
GetFileInformationByHandle
FindFirstFileExA
GetDriveTypeA
GetCPInfo
LCMapStringW
RtlUnwindEx
RtlLookupFunctionEntry
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
GetTimeFormatA
GetDateFormatA
GetFullPathNameA
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
VirtualQuery
GetModuleHandleW
GetCurrentProcess
FlushInstructionCache
VirtualProtect
DeviceIoControl
FileTimeToSystemTime
ExitThread
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
CreateDirectoryA
HeapAlloc
HeapFree
GetEnvironmentVariableA
lstrcmpW
SignalObjectAndWait
GetThreadPriority
GetPriorityClass
ResumeThread
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjectsEx
CancelWaitableTimer
GetVersionExA
GlobalFree
GlobalAlloc
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
PeekNamedPipe
SleepEx
SetLastError
VerSetConditionMask
VerifyVersionInfoA
LoadLibraryA
SetThreadPriority
WaitForSingleObjectEx
CreateEventA
ExitProcess
DecodePointer
EncodePointer

user32

GetAsyncKeyState
GetForegroundWindow
GetWindowThreadProcessId

advapi32

CryptAcquireContextA
CryptDestroyHash
CryptReleaseContext
CryptHashData
CryptCreateHash
GetUserNameW
GetCurrentHwProfileA
RegCloseKey
RegQueryValueExW
CryptGetHashParam

shell32

SHGetFolderPathW

ws2_32

listen
WSACleanup
getsockname
getsockopt
accept
__WSAFDIsSet
gethostname
WSAStartup
ntohs
WSAGetLastError
setsockopt
bind
select
htons
connect
gethostbyname
ioctlsocket
socket
inet_addr
inet_ntoa
closesocket
recv
recvfrom
send
sendto
ntohl
htonl
WSAIoctl
WSASetLastError
getpeername
freeaddrinfo
getaddrinfo

secur32

GetUserNameExW

wldap32

ord32
ord35
ord79
ord200
ord33
ord301
ord27
ord41
ord46
ord26
ord50
ord60
ord143
ord211
ord22
ord30

normaliz

IdnToAscii

winmm

waveOutWrite
waveInAddBuffer
waveInUnprepareHeader
waveOutUnprepareHeader
waveInClose
waveOutClose
waveOutGetDevCapsA
waveOutMessage
waveInGetDevCapsA
waveInMessage
waveOutOpen
waveOutGetPosition
waveInOpen
waveInReset
timeEndPeriod
timeBeginPeriod
timeGetTime
waveOutReset
waveOutPrepareHeader
waveInPrepareHeader
waveInGetNumDevs
waveOutGetNumDevs
waveOutRestart
waveInStart
waveOutGetErrorTextA
waveOutPause
waveInGetErrorTextA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInterfaceAlias
SetupDiGetClassDevsA

ole32

CoTaskMemFree
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitializeEx
PropVariantClear
CoCreateInstance
CoInitialize

Exports

Exports

Breakpad_SetSteamID
Breakpad_SteamMiniDumpInit
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
GetHSteamPipe
GetHSteamUser
GetSSeApi
InitSSE
MySteamAPI_RegisterCallResult
MySteamAPI_RegisterCallback
MySteamAPI_UnregisterCallResult
MySteamAPI_UnregisterCallback
SSECreateProcess
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAppList
SteamApps
SteamCheckAppOwnership
SteamCleanup
SteamClient
SteamController
SteamController_GetControllerState
SteamController_Init
SteamController_SetOverrideMode
SteamController_Shutdown
SteamController_TriggerHapticPulse
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUGC
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamGetLocalClientVersion
SteamGetVersion
SteamHTMLSurface
SteamHTTP
SteamInventory
SteamIsAppSubscribed
SteamIsLoggedIn
SteamIsSubscribed
SteamLogin
SteamLogout
SteamMatchmaking
SteamMatchmakingServers
SteamMusic
SteamMusicRemote
SteamNetworking
SteamRemoteStorage
SteamShutdownEngine
SteamShutdownSteamBridgeInterface
SteamStartEngine
SteamStartEngineEx
SteamStartup
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
SteamVideo
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_GetHSteamUserCurrent
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_RegisterInterfaceFuncs
Steam_ReleaseUser
Steam_RunCallbacks
Steam_SetLocalIPBinding
Steam_TerminateGameConnection
g_pSteamClientGameServer

Sections

.text
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SmartSteamEmu/SmartSteamEmu_IMPORTANT.txt
SmartSteamEmu/SmartSteamLoader.exe
.exe windows x86

8d50648aba4e0eea26780a196e32e747

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntW
GetPrivateProfileStringW
FindFirstFileW
FindClose
GetCommandLineW
GetModuleFileNameW
GetCurrentDirectoryW
GetPrivateProfileSectionNamesW
GetCurrentProcessId
OpenProcess
CreateThread
CreateProcessW
LoadLibraryW
GetProcAddress
FreeLibrary
ResumeThread
WaitForSingleObject
MultiByteToWideChar
Sleep
GetCurrentProcess
GetLastError
DecodePointer
InterlockedExchange
InterlockedCompareExchange
WideCharToMultiByte
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
HeapSetInformation
OpenFileMappingA
CreateSemaphoreW
SetEvent
CreateEventA
MapViewOfFile
CreateFileMappingA
CloseHandle
GetExitCodeThread
UnmapViewOfFile
EncodePointer

user32

TranslateMessage
SendMessageW
PostQuitMessage
DestroyWindow
DispatchMessageW
CreateDialogParamW
IsDialogMessageW
GetMessageW
ShowWindow
MoveWindow
GetDesktopWindow
GetWindowRect
MessageBoxW

advapi32

RegSetValueExA
RegCloseKey
RegSetValueExW
RegQueryValueExW
RegCreateKeyExA
RegOpenKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegQueryValueExA

shell32

CommandLineToArgvW

msvcp100

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z

psapi

GetModuleFileNameExW

wintrust

WinVerifyTrust

msvcr100

memset
_CxxThrowException
_wcsicmp
memcpy
__CxxFrameHandler3
_controlfp_s
??3@YAXPAX@Z
memmove
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
_wputenv
_vswprintf_c_l
tolower
_wtoi
fopen_s
fread
fclose
atoi
sprintf_s
memchr
??_V@YAXPAX@Z
_unlock
__dllonexit
_lock
_onexit
_amsg_exit
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 165KB - Virtual size: 165KB

.rsrc Size: 42KB - Virtual size: 42KB

.reloc Size: 512B - Virtual size: 12B

76758693642954b62393e3cd485bfb66

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

secur32

wldap32

normaliz

winmm

setupapi

ole32

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 476KB - Virtual size: 476KB

.data Size: 138KB - Virtual size: 156KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 235KB - Virtual size: 234KB

6ae091edc01e441c434a010ef1e261c4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 224KB

.rdata Size: 89KB - Virtual size: 89KB

.data Size: 13KB - Virtual size: 24KB

.pdata Size: 13KB - Virtual size: 12KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

8ad334721cf3b1fe1a9e65f8629946d0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 211KB - Virtual size: 210KB

.rdata Size: 53KB - Virtual size: 53KB

.data Size: 10KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 15KB - Virtual size: 15KB

343a480494890f4fc077324fd139cb22

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

.text
Size: 165KB - Virtual size: 165KB

.rsrc
Size: 42KB - Virtual size: 42KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 476KB - Virtual size: 476KB

.data
Size: 138KB - Virtual size: 156KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 235KB - Virtual size: 234KB

.text
Size: 224KB - Virtual size: 224KB

.rdata
Size: 89KB - Virtual size: 89KB

.data
Size: 13KB - Virtual size: 24KB

.pdata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB

.text
Size: 211KB - Virtual size: 210KB

.rdata
Size: 53KB - Virtual size: 53KB

.data
Size: 10KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 15KB - Virtual size: 15KB

.text
Size: 3.4MB - Virtual size: 3.4MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 172KB - Virtual size: 198KB

.pdata
Size: 198KB - Virtual size: 198KB

text
Size: 3KB - Virtual size: 2KB

data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 54KB - Virtual size: 53KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 87KB - Virtual size: 87KB

.reloc
Size: 2KB - Virtual size: 2KB