SteamService86[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SteamService86.exe
Size

35.9MB
MD5

aeb51b0d0659168faaccf18081081754
SHA1

f9bd4a716f809e530b4d87b18964a313e2d52cd6
SHA256

c226421b67f0e5d38a7dec892937409abfea7816bb33e5dc33092cbca230b91d
SHA512

55b0cec721bf515065afbbe29b2d757aeb49e8dbace2d64b8767da9cd363d7a454767798c344d6e7c96a6546e2e473a332fb208c282ce48070b968b75c98a373
SSDEEP

786432:6phzTSiRg2Un6uaLFoBka03KZTPC9XxBRISH+N7+A:ehZ8n6uaLCBkXKBPCHBRISen

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SteamService86.exe

Files

SteamService86.exe
.dll windows:6 windows x64 arch:x64

62c657a9e1b8e4ea21fd83a038014f83

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

ReleaseCapture

advapi32

CryptAcquireContextA

shell32

ShellExecuteA

msvcp140

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

wininet

DeleteUrlCacheEntryA

imm32

ImmGetContext

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

normaliz

IdnToAscii

wldap32

ord33

crypt32

CertFreeCertificateChainEngine

ws2_32

bind

rpcrt4

RpcStringFreeA

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context

api-ms-win-crt-runtime-l1-1-0

_resetstkoflw

api-ms-win-crt-stdio-l1-1-0

fwrite

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-filesystem-l1-1-0

_stat64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-time-l1-1-0

_time64

Sections

.text
Size: - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.v[X
Size: - Virtual size: 21.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.G=\
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.BR;
Size: 35.9MB - Virtual size: 35.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

62c657a9e1b8e4ea21fd83a038014f83

Headers

DLL Characteristics

File Characteristics

Imports

d3dx11_43

d3d11

kernel32

user32

advapi32

shell32

msvcp140

wininet

imm32

d3dcompiler_43

dwmapi

normaliz

wldap32

crypt32

ws2_32

rpcrt4

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

Sections

.text Size: - Virtual size: 723KB

.rdata Size: - Virtual size: 2.1MB

.data Size: - Virtual size: 45KB

.pdata Size: - Virtual size: 30KB

.v[X Size: - Virtual size: 21.1MB

.G=\ Size: 5KB - Virtual size: 5KB

.BR; Size: 35.9MB - Virtual size: 35.9MB

.reloc Size: 512B - Virtual size: 296B

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 723KB

.rdata
Size: - Virtual size: 2.1MB

.data
Size: - Virtual size: 45KB

.pdata
Size: - Virtual size: 30KB

.v[X
Size: - Virtual size: 21.1MB

.G=\
Size: 5KB - Virtual size: 5KB

.BR;
Size: 35.9MB - Virtual size: 35.9MB

.reloc
Size: 512B - Virtual size: 296B

.rsrc
Size: 512B - Virtual size: 469B