b41c55aecf151fe497ff7fa7c886ca54 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b41c55aecf151fe497ff7fa7c886ca54
Size

2.6MB
MD5

b41c55aecf151fe497ff7fa7c886ca54
SHA1

136ad8f9c502f9556a4a34c93ae6bb27d9426db0
SHA256

786aca96997e1b89b91866dbb35328f93169f6505be4ef6f43f6f81088f68e90
SHA512

62ac38a29b866e483c1110aef8c0765e517306d5e28ab3b0c51475ccabd8975c605cd38068d70c4e7e4efe56556e577c7beb13c03924d9d5f7488af0f1abf692
SSDEEP

1536:mDOCnDh6/ACCyplF99zveGOouoc5fMhCjlAaX9Di:OnDh6gypPbveGOouh5MGl9i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b41c55aecf151fe497ff7fa7c886ca54

Files

b41c55aecf151fe497ff7fa7c886ca54
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SteamX\Steam\Steam\obj\Release\Steam Patch.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 102B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ