DRM
FreeTP_Org
Behavioral task
behavioral1
Sample
SteamFix64.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
SteamFix64.dll
Resource
win10v2004-20240802-en
Target
SteamFix64.dll
Size
1.2MB
MD5
c21f161363b7a1c9a4cda780e99f1dcd
SHA1
5b6f4e4b8fe321c70e5037e381dabc633e6f18de
SHA256
b543786376bd7a1ff82d17b9e766cc5f42f40e8c2f3eebe4923d75c8ec74c518
SHA512
1762877e2312526b210d9935388b4b3badd88e2e48dd715681256d3a15b9c9d6c4c896c115c4bcb2ad3ad89bb3dc811f0fcfb5ae0871432cf9650c7e64a7ad9c
SSDEEP
24576:ywlFrCW6vkYe4ipRQ+vCjLl/GPYdZdi7Yvf80eQi+j8u:ywlFrLYOfQ+vELl/GPYdZ6af80eQi+n
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
SteamFix64.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
QueryPerformanceCounter
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxA
RegSetValueExA
_Query_perf_frequency
__CxxFrameHandler4
__std_terminate
fflush
calloc
strncpy_s
_register_onexit_function
strtol
_mbsicmp
_time64
_stat64i32
___lc_codepage_func
ceilf
DRM
FreeTP_Org
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ