SmartSteamEmu[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SmartSteamEmu.dll
Size

3.9MB
MD5

22d77d612709f677f364e51409497bc7
SHA1

f3539e21d42ca9658278c60c2730e106d119c261
SHA256

dfe81a71aacd7bc0d0cf61c61c26f17ad753724c9ab76254fbb31c1690011b7d
SHA512

645fcbce611b687d65f265adc30a73a93f51615675e06d714ffebd3b2a3891db6ecc0d375299512fa7ec28af113149e017ddddcd49c2f2c64b48b46f9b45ba75
SSDEEP

49152:zMS1HnhrIdCsTo2BryWJWA/Le4zP7IKhCg+FW7fAknzfFtnCFSYfwUja7YX5zZVe:I+hoO7jAjRzP7ILJW7flzfg4Uja7Yu

Score

1^/10

Malware Config

Signatures

Files

SmartSteamEmu.dll
.dll windows x86

dc13b329091d6f2fae8fdea9b626249d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetModuleFileNameW
GetTickCount
InterlockedCompareExchange
GetCurrentThread
InterlockedIncrement
InterlockedDecrement
TerminateThread
CreateEventW
WaitForSingleObject
TryEnterCriticalSection
SetEvent
Sleep
InterlockedExchange
QueryPerformanceFrequency
QueryPerformanceCounter
CreateFileW
ReadFile
GetCurrentProcessId
GetCurrentThreadId
WaitForMultipleObjects
CreateFileA
WriteFile
FindClose
GetFileSize
MoveFileW
GetExitCodeThread
InterlockedExchangeAdd
ExpandEnvironmentStringsW
CreateDirectoryW
FindFirstFileW
FindNextFileW
DeleteFileW
ResetEvent
GetSystemPowerStatus
GetProcAddress
LoadLibraryW
FormatMessageA
GetLastError
LocalFree
FreeLibrary
GetPrivateProfileIntW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetComputerNameW
WritePrivateProfileStringW
CopyFileW
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
MoveFileExW
WideCharToMultiByte
MultiByteToWideChar
WaitNamedPipeW
SetNamedPipeHandleState
CreateNamedPipeW
ConnectNamedPipe
DisconnectNamedPipe
FlushFileBuffers
SetFilePointer
GetModuleHandleExW
GetModuleHandleA
CloseHandle
GetSystemDirectoryW
CreateProcessW
DeviceIoControl
GetVersionExW
GetWindowsDirectoryA
HeapCreate
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
DisableThreadLibraryCalls
IsBadReadPtr
VirtualQuery
GetCurrentProcess
FlushInstructionCache
VirtualProtect
GetStringTypeW
GetFileInformationByHandle
CompareStringW
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetModuleFileNameA
GetCurrentDirectoryW
GetFullPathNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoW
GetProcessHeap
SetEndOfFile
GetConsoleMode
GetConsoleCP
SetStdHandle
HeapSize
IsProcessorFeaturePresent
TlsFree
FindFirstFileExA
GetDriveTypeA
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCPInfo
LCMapStringW
RtlUnwind
RaiseException
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetFullPathNameA
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitThread
HeapReAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
CreateDirectoryA
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
InitializeCriticalSection
HeapAlloc
HeapFree
GetEnvironmentVariableA
lstrcmpW
SignalObjectAndWait
GetThreadPriority
GetPriorityClass
ResumeThread
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjectsEx
CancelWaitableTimer
GetVersionExA
GlobalFree
GlobalAlloc
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
PeekNamedPipe
SleepEx
SetLastError
VerSetConditionMask
VerifyVersionInfoA
LoadLibraryA
SetThreadPriority
WaitForSingleObjectEx
CreateEventA
ExitProcess
DecodePointer
EncodePointer
HeapDestroy

user32

GetWindowThreadProcessId
GetAsyncKeyState
GetForegroundWindow

advapi32

CryptGetHashParam
CryptReleaseContext
CryptHashData
CryptAcquireContextA
CryptCreateHash
GetUserNameW
GetCurrentHwProfileA
RegCloseKey
RegQueryValueExW
CryptDestroyHash

shell32

SHGetFolderPathW

ws2_32

getaddrinfo
freeaddrinfo
getpeername
WSASetLastError
WSAIoctl
__WSAFDIsSet
getsockname
getsockopt
accept
listen
WSACleanup
WSAStartup
gethostname
ntohs
WSAGetLastError
setsockopt
bind
select
htons
connect
gethostbyname
ioctlsocket
socket
inet_addr
inet_ntoa
closesocket
recv
recvfrom
send
sendto
ntohl
htonl

secur32

GetUserNameExW

wldap32

ord35
ord79
ord200
ord33
ord301
ord27
ord41
ord46
ord30
ord26
ord50
ord60
ord143
ord211
ord22
ord32

normaliz

IdnToAscii

winmm

waveInAddBuffer
waveInUnprepareHeader
waveOutUnprepareHeader
waveInClose
waveOutClose
waveOutGetDevCapsA
waveOutMessage
waveInGetDevCapsA
waveInMessage
waveOutWrite
waveOutGetErrorTextA
waveInOpen
waveInPrepareHeader
timeEndPeriod
timeBeginPeriod
timeGetTime
waveOutGetNumDevs
waveOutGetPosition
waveInGetNumDevs
waveOutRestart
waveOutPause
waveInStart
waveInReset
waveOutReset
waveOutOpen
waveOutPrepareHeader
waveInGetErrorTextA

setupapi

SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceAlias
SetupDiOpenDeviceInterfaceRegKey

ole32

CoTaskMemFree
CoGetInterfaceAndReleaseStream
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoInitializeEx
PropVariantClear
CoCreateInstance
CoInitialize

Exports

Exports

Breakpad_SetSteamID
Breakpad_SteamMiniDumpInit
Breakpad_SteamSetSteamID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CreateInterface
GetHSteamPipe
GetHSteamUser
GetSSeApi
InitSSE
MySteamAPI_RegisterCallResult
MySteamAPI_RegisterCallback
MySteamAPI_UnregisterCallResult
MySteamAPI_UnregisterCallback
SSECreateProcess
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAppList
SteamApps
SteamCheckAppOwnership
SteamCleanup
SteamClient
SteamController
SteamController_GetControllerState
SteamController_Init
SteamController_SetOverrideMode
SteamController_Shutdown
SteamController_TriggerHapticPulse
SteamFriends
SteamGameServer
SteamGameServerApps
SteamGameServerHTTP
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUGC
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamGetLocalClientVersion
SteamGetVersion
SteamHTMLSurface
SteamHTTP
SteamInventory
SteamIsAppSubscribed
SteamIsLoggedIn
SteamIsSubscribed
SteamLogin
SteamLogout
SteamMatchmaking
SteamMatchmakingServers
SteamMusic
SteamMusicRemote
SteamNetworking
SteamRemoteStorage
SteamShutdownEngine
SteamShutdownSteamBridgeInterface
SteamStartEngine
SteamStartEngineEx
SteamStartup
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
SteamVideo
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_GetHSteamUserCurrent
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_RegisterInterfaceFuncs
Steam_ReleaseUser
Steam_RunCallbacks
Steam_SetLocalIPBinding
Steam_TerminateGameConnection
g_pSteamClientGameServer

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 484KB - Virtual size: 483KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 243KB - Virtual size: 243KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc13b329091d6f2fae8fdea9b626249d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ws2_32

secur32

wldap32

normaliz

winmm

setupapi

ole32

Exports

Exports

Sections

.text Size: 3.1MB - Virtual size: 3.1MB

.rdata Size: 484KB - Virtual size: 483KB

.data Size: 142KB - Virtual size: 161KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 243KB - Virtual size: 243KB

.text
Size: 3.1MB - Virtual size: 3.1MB

.rdata
Size: 484KB - Virtual size: 483KB

.data
Size: 142KB - Virtual size: 161KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 243KB - Virtual size: 243KB