Static task
static1
Behavioral task
behavioral1
Sample
steam_api64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
steam_api64.dll
Resource
win10v2004-20240419-en
General
-
Target
steam_api64.dll
-
Size
293KB
-
MD5
6e84e20f5dd2c65a52a5f0e021cd6f92
-
SHA1
669b57cf98b716b417db836ab12e1e88167fcf99
-
SHA256
d7d7253d8f3a8a9bc05ec5b8a4b38b1a23e501bc99500c470d4117638fd52fea
-
SHA512
2af9e36d6ec94aa854f241f7aa8a8848208b782a63ff84459418cec3f28d2c4a8526cf526bab1912d84267f328635cbddd5a2b4b5f7d804d767158a47e583ae2
-
SSDEEP
6144:rYtj4IJiOnpwbkfI3Vu2gF8oF6tYLSOt7SeISI03a89jonb:rYtMIcOnibkfI3LPtYLlt7Skrwb
Malware Config
Signatures
Files
-
steam_api64.dll.dll windows:6 windows x64 arch:x64
Code Sign
2b:6c:4c:e9:a4:04:70:47:b2:b1:ad:41:05:1b:98:6bCertificate
IssuerCN=WUS!Not Before01-07-2014 08:00Not After01-01-2088 08:00SubjectCN=WUS!22:6a:a1:b1:42:62:ed:d9:d3:83:e8:3e:9f:d9:5e:4c:5c:53:b4:57Signer
Actual PE Digest22:6a:a1:b1:42:62:ed:d9:d3:83:e8:3e:9f:d9:5e:4c:5c:53:b4:57Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Exports
Exports
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_Init
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_ReleaseCurrentThreadMemory
SteamAPI_RestartApp
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamAppList
SteamApps
SteamClient
SteamContentServer
SteamContentServerUtils
SteamContentServer_Init
SteamContentServer_RunCallbacks
SteamContentServer_Shutdown
SteamController
SteamEncryptedAppTicket_BDecryptTicket
SteamEncryptedAppTicket_BIsTicketForApp
SteamEncryptedAppTicket_BUserIsVacBanned
SteamEncryptedAppTicket_BUserOwnsAppInTicket
SteamEncryptedAppTicket_GetTicketAppID
SteamEncryptedAppTicket_GetTicketIssueTime
SteamEncryptedAppTicket_GetTicketSteamID
SteamEncryptedAppTicket_GetUserVariableData
SteamFriends
SteamGameServer
SteamGameServerHTTP
SteamGameServerInventory
SteamGameServerNetworking
SteamGameServerStats
SteamGameServerUGC
SteamGameServerUtils
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_Init
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamHTMLSurface
SteamHTTP
SteamInternal_ContextInit
SteamInternal_CreateInterface
SteamInternal_GameServer_Init
SteamInternal_GlobalContextGameServerPtr
SteamInternal_Init
SteamInventory
SteamMasterServerUpdater
SteamMatchmaking
SteamMatchmakingServers
SteamMusic
SteamMusicRemote
SteamNetworking
SteamNetworkingUpdater
SteamParentalSettings
SteamRemoteStorage
SteamScreenshots
SteamUGC
SteamUnifiedMessages
SteamUser
SteamUserStats
SteamUtils
SteamVideo
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
VR_GetGenericInterface
VR_GetStringForHmdError
VR_Init
VR_IsHmdPresent
VR_Shutdown
g_pSteamClientGameServer
Sections
WUS0 Size: - Virtual size: 588KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
WUS1 Size: 285KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE