Static task
static1
Behavioral task
behavioral1
Sample
SteamGo.exe
Resource
win7-20240708-en
General
-
Target
SteamGo.exe
-
Size
182KB
-
MD5
27f5206e3b588fbe54601de9fdb2059c
-
SHA1
55f1053d475f2cabdd1eebf63de807043f72574d
-
SHA256
ffbd1e5dc206be99aba5a87278e652603e4e46f832d0320f15b1afca302764d4
-
SHA512
b1606e4d82f7f36a0c819846bf369fbfac21b1cc1315be1204f6b6236d56c95ad0aac97eb2e1d87fab039e86b793b1c52b15c5f06bc3bc46df41c4d05fc609b2
-
SSDEEP
1536:v9E9lX+DkRzn5oE2aJ7Ubrai2JOQbnTlX+7l:v9e9aktnjhUHai2JOQbT9ol
Malware Config
Signatures
Files
-
SteamGo.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7b:f7:58:1f:e4:1a:18:91:48:c2:c4:b8:e0:87:c5:b1Certificate
IssuerCN=XHOME\\userNot Before11/06/2022, 06:09Not After11/06/2023, 12:09SubjectCN=XHOME\\user76:c2:16:9d:c2:17:8a:73:5d:c3:55:39:cf:fa:36:54:83:1f:94:3eSigner
Actual PE Digest76:c2:16:9d:c2:17:8a:73:5d:c3:55:39:cf:fa:36:54:83:1f:94:3eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\user\source\repos\SteamGo\SteamGo\obj\Debug\SteamGo.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ