General

  • Target
    steam_api64.dll
  • Size 7.0MB
  • Sample260705-c7qpmsgx2z
  • SHA256 03c99f3f81445fe1df463c351cb035a634ade4fca7900a7000c0cd35f647a8b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • steam_api64.dll
    .dll 7.0MB

steam_api64.dll

  • IMPHASH d171979655c1237b6507109a2b5d99bd
  • SHA256 03c99f3f81445fe1df463c351cb035a634ade4fca7900a7000c0cd35f647a8b9
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
f0:fe:3f:b0:02:bb:00:88:eb:a4:ce:c4:94:f7:5a:dc:b7:dc:cd:85:4a:6f:55:c9:62:fa:ac:f0:67:d9:f1:80
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=GSE,OU=GSE,O=GSE,C=UK
Minor OS version
0
Major OS version
6
Entry point
5056012
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths