General

  • Target
    Steam.exe
  • Size 5.5MB
  • Sample260720-pemthabz2t
  • SHA256 96e7ece17949f598ccf6aa55dc0194cb4896607b3f369580cf1f998b280e7f4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • Steam.exe
    .exe 5.5MB

Steam.exe

  • IMPHASH 7df38e7ed5c3951c98bd977e3eb4cc23
  • SHA256 96e7ece17949f598ccf6aa55dc0194cb4896607b3f369580cf1f998b280e7f4d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
49:31:db:1b:7d:16:bd:90:b8:6f:5d:10:34:2c:fb:fe:57:48:8b:8a:c9:59:ed:25:2a:b5:4e:09:df:da:29:21
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
Minor OS version
0
Major OS version
6
Entry point
2006248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildworker\steam_rel_client_hotfix_win64\build\src\steamexe\win64\Release\steamexe.pdb