Automation Launcher Steam[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Automation Launcher Steam.exe
Size

394KB
MD5

cbd594b8c576e1d653847a1495e07f1b
SHA1

6e282952d92d7269664801aeb088a9e49255a495
SHA256

882120ff0adec13257dc836c3ef1bf37509596edc6238925f7a791aeefc5e749
SHA512

34ad4a25e01437a4a869fda900efcf9dea1eaaddfc7c08d087408ba833331b3452f95050aa0ea8b2599917cc760cbade500300261a7b1e1d83654620ec6e6327
SSDEEP

12288:4AKQd56b9NPlKQd56b9NPbV0BzigQXun8e:4PgobnAgobnbVd+8e

Score

1^/10

Malware Config

Signatures

Files

Automation Launcher Steam.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:8b:b3:86:6a:b7:9a:19:85:0a:be:12:b9:7c:2d:83
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

09/03/2022, 00:00

Not After

08/03/2025, 23:59

Subject

CN=Camshaft Software LTD,O=Camshaft Software LTD,ST=Wellington,C=NZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

3f:90:86:0e:53:f7:f5:e8:4e:b8:6e:23:63:fb:8f:07:28:94:50:61
Signer

Actual PE Digest

3f:90:86:0e:53:f7:f5:e8:4e:b8:6e:23:63:fb:8f:07:28:94:50:61

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\JCB_BUILD\Misc\Automation Steam Launcher - CEF - 2\obj\x86\Release\Automation Launcher Steam.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 379KB - Virtual size: 379KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

01:8b:b3:86:6a:b7:9a:19:85:0a:be:12:b9:7c:2d:83Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

3f:90:86:0e:53:f7:f5:e8:4e:b8:6e:23:63:fb:8f:07:28:94:50:61Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 379KB - Virtual size: 379KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

01:8b:b3:86:6a:b7:9a:19:85:0a:be:12:b9:7c:2d:83
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

3f:90:86:0e:53:f7:f5:e8:4e:b8:6e:23:63:fb:8f:07:28:94:50:61
Signer

.text
Size: 379KB - Virtual size: 379KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 12B