E:\PowerSimulator\Temp\com.rlabrecque.steamworks.net.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f5c3e96765383119d29f2f693bf02cf0b77a0b3bbd794f3f7165374e1ae2c72f.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f5c3e96765383119d29f2f693bf02cf0b77a0b3bbd794f3f7165374e1ae2c72f.dll
Resource
win10v2004-20241007-en
General
-
Target
f5c3e96765383119d29f2f693bf02cf0b77a0b3bbd794f3f7165374e1ae2c72f
-
Size
366KB
-
MD5
f23cd59eebbef4c13f2eb2560af626c6
-
SHA1
66025889780ac79cae1956e0b1c5a9d58d897825
-
SHA256
f5c3e96765383119d29f2f693bf02cf0b77a0b3bbd794f3f7165374e1ae2c72f
-
SHA512
c9472422fa728f1e6f369b1e5358c9706f5caa0ebd0c94823148637a2713461ce18d031f470c773ed380722b9ef67b14422522bf6aa6b22515896c38c07e7335
-
SSDEEP
6144:iUCV6nBGmxKPu99+lIt3l678lbRLR+/Ia9salJxSpbnk25BR8:ihiBGmxJr3l6elalJirnR8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f5c3e96765383119d29f2f693bf02cf0b77a0b3bbd794f3f7165374e1ae2c72f
Files
-
f5c3e96765383119d29f2f693bf02cf0b77a0b3bbd794f3f7165374e1ae2c72f.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 364KB - Virtual size: 364KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ