SmartSteamLoader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SmartSteamLoader.exe
Size 227KB
Sample260601-bwst7adv2q
SHA256 44e6e2035db0ab9c4e811e7418c72f01f50e675dbdffd8114e29f965ec62eb38
MD5 0e7fde098d64a93e60191d25e06bf642
SHA1 8d0973ef176d03f68d33c4d9e6595ba8c988ff1f
SHA512 b3a63341882abc284bd8d2718608d7c60b565227e672450497f83f4c72890547b49f3730382a87c94cb2faf172397d79d1108a74068b3e1b5465736dcea98006
SSDEEP 3072:Yz14duOvSxCLLT9qCOY4jb1pQzhHKPtOnO6VrVPoVJtCbhVPoVJtCbFy5w:i14duK5X5mYQydHKPtOnRWehWeQ5
TLSH
T16E344A0F7F58801FC890163571D7E390BB7BA5618B07134FA2750A6CBD223E6AE691ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SmartSteamLoader.exe

File Explorer

SmartSteamLoader.exe

.exe 227KB

SmartSteamLoader.exe

IMPHASH 0af9925d510541540a84a0f3211351ad
SHA256 44e6e2035db0ab9c4e811e7418c72f01f50e675dbdffd8114e29f965ec62eb38
MD5 0e7fde098d64a93e60191d25e06bf642
SHA1 8d0973ef176d03f68d33c4d9e6595ba8c988ff1f
SHA512 b3a63341882abc284bd8d2718608d7c60b565227e672450497f83f4c72890547b49f3730382a87c94cb2faf172397d79d1108a74068b3e1b5465736dcea98006
SSDEEP 3072:Yz14duOvSxCLLT9qCOY4jb1pQzhHKPtOnO6VrVPoVJtCbhVPoVJtCbFy5w:i14duK5X5mYQydHKPtOnRWehWeQ5
TLSH
T16E344A0F7F58801FC890163571D7E390BB7BA5618B07134FA2750A6CBD223E6AE691ED
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27914

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Developments\Games\SmartSteamEmu\Release\SmartSteamLoader.pdb

kernel32

GetPrivateProfileIntW GetPrivateProfileStringW FindFirstFileW FindClose GetCommandLineW GetModuleFileNameW GetCurrentDirectoryW GetPrivateProfileSectionNamesW GetCurrentProcessId OpenProcess CreateThread CreateProcessW ResumeThread WaitForSingleObject GetExitCodeThread Sleep MultiByteToWideChar GetLastError DecodePointer EncodePointer InterlockedExchange InterlockedCompareExchange GetSystemTimeAsFileTime GetCurrentThreadId GetTickCount QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetStartupInfoW HeapSetInformation WideCharToMultiByte OpenFileMappingA CreateSemaphoreW SetEvent CreateEventA MapViewOfFile CreateFileMappingA CloseHandle GetCurrentProcess UnmapViewOfFile

user32

TranslateMessage SendMessageW PostQuitMessage DestroyWindow DispatchMessageW CreateDialogParamW IsDialogMessageW GetMessageW ShowWindow MoveWindow GetDesktopWindow GetWindowRect MessageBoxW

advapi32

RegQueryValueExA RegCloseKey RegSetValueExW RegQueryValueExW RegCreateKeyExA RegOpenKeyExA SetSecurityDescriptorDacl InitializeSecurityDescriptor RegSetValueExA

shell32

CommandLineToArgvW

msvcp100

?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z

psapi

GetModuleFileNameExW

wintrust

WinVerifyTrust

msvcr100

memset _CxxThrowException memcpy _wcsicmp _controlfp_s __CxxFrameHandler3 ??3@YAXPAX@Z memmove ??0exception@std@@QAE@ABV01@@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??0exception@std@@QAE@ABQBD@Z ??2@YAPAXI@Z _wputenv _vswprintf_c_l tolower _wtoi fopen_s fread fclose atoi sprintf_s memchr ??_V@YAXPAX@Z _unlock __dllonexit _lock _onexit _amsg_exit __getmainargs _cexit _exit _XcptFilter _ismbblead exit _acmdln _initterm _initterm_e _configthreadlocale __setusermatherr _commode _fmode __set_app_type _crt_debugger_hook ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _except_handler4_common _invoke_watson