Static task
static1
Behavioral task
behavioral1
Sample
user32SteamFamilies.dll
Resource
win11-20241007-en
General
-
Target
user32SteamFamilies.dll
-
Size
425KB
-
MD5
4e677c27fee53437252a3b63f9447924
-
SHA1
8007216f7ce33fd9f0273d232d75fc0d8271c1ea
-
SHA256
a649252a304b5cdf9d4d9e222a8220bab7c8478a8e7949044d03e0904298ed36
-
SHA512
d2b29372d5a6d82c27035beb5ecfcf75fab3b449b04ed13703424f2c7f834424941914e6014b77cf498626c850f08dfd53672ee035ca01bcb07bf6c97bbd0e95
-
SSDEEP
6144:OtvGAzkd7Rr4lfWR2UyeQGpmeXflTbxNbKV5GVUuhEl4ILprMzHYs2D/dvtnA5lm:8A3jrQuILxns2D/XDVtyfu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource user32SteamFamilies.dll
Files
-
user32SteamFamilies.dll.dll windows:6 windows x86 arch:x86
d3c3c940df0794704eabef458c9b6aca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
VirtualAlloc
VirtualQuery
CreateDirectoryW
GetStartupInfoW
ReadFile
GetFileSizeEx
WriteProcessMemory
HeapFree
SetLastError
EnterCriticalSection
GetHandleInformation
GetCurrentProcess
WriteFile
GetModuleHandleExW
GetPrivateProfileIntW
GetModuleFileNameW
GetProcessId
LeaveCriticalSection
GetEnvironmentVariableW
InitializeCriticalSectionEx
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
FreeLibraryAndExitThread
HeapSize
CreateEventW
Sleep
GetLastError
K32GetModuleBaseNameW
SetEvent
DeleteFileW
HeapReAlloc
CloseHandle
GetNativeSystemInfo
FreeConsole
CreateThread
HeapAlloc
GetLocalTime
VirtualProtectEx
DecodePointer
HeapDestroy
GetThreadContext
GetProcAddress
VirtualAllocEx
DeleteCriticalSection
ExitProcess
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FlushInstructionCache
VirtualFreeEx
SetThreadContext
AllocConsole
IsWow64Process
LoadLibraryExW
HeapCreate
VirtualProtect
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
OpenThread
SetEndOfFile
RaiseException
GetSystemInfo
FreeLibrary
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwind
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
CompareStringW
LCMapStringW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
WriteConsoleW
Sections
.text Size: 299KB - Virtual size: 299KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ