Steam[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Steam.exe
Size

475KB
MD5

a12afa9f303e4087b094955002369a1b
SHA1

004eb16b6bba8f4440e5d5c6778729d068648a8e
SHA256

8c0bd8ffac1a49d1f65a30ebd6daf1dfb0217cc36835eddd7af72bc5d10fea6c
SHA512

6c14c4595448cc952cf43fd4645f84ee462b596dba082f46b067a6a2ef683a63d87cf2b950183e68352333e2a9933dd719803bb3c50578534882f2e132a56590
SSDEEP

6144:kIEzoKHzEGZkrzTYe6VlWT8b9usG67VbjYC452SSJFO:kdEoVPVle8VJl45KDO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Steam.exe

Files

Steam.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ