Automation Launcher Steam[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Automation Launcher Steam.exe
Size

398KB
MD5

da8582bfe24369a1d623cf8dba19931c
SHA1

26b0329edb6a8170a0cfed5209980533da424992
SHA256

8c007fdaad653615224529a0a80f67103bf5b9311d799ff8540cb5958680d1b4
SHA512

cc93ef750c9b5d2e38958591220d84957e513ab329309da9f96de2c5282870c35149fdc65f29fa492a9b11ae9e2b244839fafa84e4c510808693d479a68bed70
SSDEEP

12288:oLmjKQd56b9NPdKQd56b9NPbV0BzigQXukDw6J:ommgobnYgobnbVd+Ew6J

Score

1^/10

Malware Config

Signatures

Files

Automation Launcher Steam.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

01:8b:b3:86:6a:b7:9a:19:85:0a:be:12:b9:7c:2d:83
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

09/03/2022, 00:00

Not After

08/03/2025, 23:59

Subject

CN=Camshaft Software LTD,O=Camshaft Software LTD,ST=Wellington,C=NZ

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b7:0a:da:f5:74:58:65:01:2c:57:fa:43:2e:43:00:54:34:8f:5b:24
Signer

Actual PE Digest

b7:0a:da:f5:74:58:65:01:2c:57:fa:43:2e:43:00:54:34:8f:5b:24

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\JCB_BUILD\Misc\Automation Steam Launcher - CEF - 2\obj\x86\Release\Automation Launcher Steam.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 384KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

01:8b:b3:86:6a:b7:9a:19:85:0a:be:12:b9:7c:2d:83Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

b7:0a:da:f5:74:58:65:01:2c:57:fa:43:2e:43:00:54:34:8f:5b:24Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 384KB - Virtual size: 383KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 12B

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

01:8b:b3:86:6a:b7:9a:19:85:0a:be:12:b9:7c:2d:83
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

b7:0a:da:f5:74:58:65:01:2c:57:fa:43:2e:43:00:54:34:8f:5b:24
Signer

.text
Size: 384KB - Virtual size: 383KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 12B