5toubun_steam[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5toubun_steam.exe
Size

6.3MB
MD5

e162b43e1796adea8fd777a64a963640
SHA1

1be461f3341dc5f183147779986024e46e9968e8
SHA256

2beca6559681ee4fd3872e2b70fd779393694119dd16b54ba6bfd34316ed824a
SHA512

2d4dc7d62df129f9e552f70f5bcdd68d565050e8945ee03471f81ae9ed5bc821919513e245b9bfce8176d00d5ce99d64d484c6453a5ddabb4c3ddf48a1a110f6
SSDEEP

98304:N6666666666666666666666666666666x666666666666666fwwwwwwwwwwwwww/:3QEXIlH+RE2OoNSdh6iaG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5toubun_steam.exe

Files

5toubun_steam.exe
.exe windows:6 windows x86 arch:x86

b2be16f3dae85bb1b28039b4ff8595e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

d3dx9_43

D3DXVec3Project
D3DXVec4Transform
D3DXMatrixTranspose
D3DXMatrixMultiply
D3DXMatrixInverse
D3DXMatrixScaling

dinput8

DirectInput8Create

xinput1_3

ord3
ord2

winmm

timeGetTime
PlaySoundA
timeSetEvent
timeEndPeriod
timeKillEvent
timeBeginPeriod

netapi32

Netbios

iphlpapi

GetAdaptersInfo

kernel32

SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
DeleteFileA
GetFileSize
ReadFile
WriteFile
CloseHandle
GetLastError
ReleaseMutex
WaitForSingleObject
CreateFileA
GetFileInformationByHandle
SetFilePointerEx
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
ResetEvent
ReleaseSemaphore
CreateEventA
Sleep
CreateSemaphoreW
CreateThread
SetThreadPriority
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObjectEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
WakeConditionVariable
SleepConditionVariableCS
DeleteCriticalSection
InitializeConditionVariable
GetNativeSystemInfo
TryEnterCriticalSection
WakeAllConditionVariable
VirtualAlloc
VirtualFree
VirtualQuery
GlobalAlloc
GlobalFree
lstrcpynA
lstrlenA
ExitProcess
CreateMutexA
InitializeCriticalSection
WaitForMultipleObjects
GetCurrentProcess
GetCurrentThreadId
lstrcmpW
CreateSemaphoreA
MulDiv
GetCurrentThread
GetThreadPriority
GetVersionExA
GetModuleHandleA
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
GetFileSizeEx
SetEndOfFile
SleepConditionVariableSRW
LocalFree
FormatMessageA
FlushFileBuffers
FreeResource
GetSystemInfo
GetTickCount
SizeofResource
FindResourceA
DeleteFileW
FileTimeToLocalFileTime
FindClose
FindFirstFileW
FindNextFileW
OutputDebugStringW
GetSystemTimeAsFileTime
GetModuleFileNameA
FileTimeToSystemTime
SystemTimeToFileTime
TerminateThread
ResumeThread
SetFilePointer
SetThreadIdealProcessor
GetProcessAffinityMask
IsDBCSLeadByte
GetTimeZoneInformation
GetUserDefaultLCID
IsProcessorFeaturePresent
RaiseException
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetModuleHandleW
LCMapStringEx
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
TryAcquireSRWLockExclusive
GetExitCodeThread
SwitchToThread
GetStdHandle
HeapFree
HeapAlloc
GetFileType
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
HeapReAlloc
LockResource
RtlUnwind
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetFileAttributesW
ExitThread
FreeLibraryAndExitThread
SetLastError
GetCommandLineA
GetCommandLineW
IsValidCodePage
GetACP
GetOEMCP
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapSize
WriteConsoleW
LoadResource
GetModuleFileNameW

user32

WindowFromPoint
ShowCursor
ScreenToClient
GetCursorPos
SetCursorPos
LoadIconA
FindWindowA
SetWindowLongA
GetWindowLongA
AdjustWindowRectEx
GetWindowRect
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RemovePropA
GetPropA
SetPropA
InvalidateRect
DrawTextW
GetDC
GetSystemMetrics
KillTimer
SetTimer
SetCapture
GetCapture
GetKeyState
SetFocus
IsIconic
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
CreateWindowExA
RegisterClassExA
CallWindowProcA
PostQuitMessage
DefWindowProcA
TranslateMessage
TrackMouseEvent
MsgWaitForMultipleObjects
DispatchMessageA
RegisterWindowMessageA
GetQueueStatus
PeekMessageA
SendMessageA
LoadCursorA
SetClassLongA
MessageBoxW
MessageBoxA
GetClientRect
GetKeyboardState
GetFocus
FillRect
ReleaseDC
SetRect
PostThreadMessageA
ReleaseCapture

gdi32

CreateSolidBrush
DeleteObject
CreateCompatibleDC
GetStockObject
GetDeviceCaps
GetGlyphOutlineA
GetTextMetricsA
CreateFontW
DeleteDC
GetDIBits
SelectObject
SetBkColor
SetBkMode
SetTextColor
CreateDIBSection
CreateFontIndirectA
GdiFlush

advapi32

CryptSetKeyParam
CryptDestroyHash
CryptDecrypt
CryptEncrypt
CryptImportKey
CryptReleaseContext
CryptDestroyKey
CryptAcquireContextA

shell32

ShellExecuteW
DragAcceptFiles
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoUninitialize
CoFreeUnusedLibraries
CoCreateInstance
CoCreateGuid
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoInitializeEx

steam_api

SteamInternal_ContextInit
SteamInternal_FindOrCreateUserInterface
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamAPI_GetHSteamUser
SteamInternal_SteamAPI_Init
SteamAPI_RunCallbacks
SteamAPI_Shutdown

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 844KB - Virtual size: 843KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 194KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 358KB - Virtual size: 357KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2be16f3dae85bb1b28039b4ff8595e2

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

d3dx9_43

dinput8

xinput1_3

winmm

netapi32

iphlpapi

kernel32

user32

gdi32

advapi32

shell32

ole32

steam_api

Sections

.text Size: 4.8MB - Virtual size: 4.8MB

.rodata Size: 2KB - Virtual size: 2KB

.rdata Size: 844KB - Virtual size: 843KB

.data Size: 194KB - Virtual size: 1.2MB

.rsrc Size: 358KB - Virtual size: 357KB

.reloc Size: 146KB - Virtual size: 146KB

.text
Size: 4.8MB - Virtual size: 4.8MB

.rodata
Size: 2KB - Virtual size: 2KB

.rdata
Size: 844KB - Virtual size: 843KB

.data
Size: 194KB - Virtual size: 1.2MB

.rsrc
Size: 358KB - Virtual size: 357KB

.reloc
Size: 146KB - Virtual size: 146KB