steamunlocked-launcher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
steamunlocked-launcher.exe
Size 13.1MB
Sample260804-nbb26adl71
SHA256 c3f0f7f74d2ee14524341cf2c266459208c5eb6380da07f9948f740e1c6c7f23
MD5 4865c49cb1a7d51abea58a657348dbcc
SHA1 8d84b6019874cc946ae4dbeeba5df6bca5023c65
SHA512 79d00f6eb44b0ba4e41e9e50daf3cd02e0aea47ae94b891b5cc8833ebf90d01443605e3c161c492c220391ddf889730c2928acd2772f1d5ef3be2910c61167fb
SSDEEP 196608:x3M8XjtLCTwUNqFnsp4r0JGu9pWPNIbdCPe:JMUjlCT4F04sGEWPNIMe
TLSH
T13DD63A11BE9B5958D18ACCB0C34B8AA78E2130DF093AB4BF44CA52293F7D7F55F19219
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
steamunlocked-launcher.exe

File Explorer

steamunlocked-launcher.exe

.exe 13.1MB

steamunlocked-launcher.exe

IMPHASH fb7b3a549cfa573292ff73deeda028dc
SHA256 c3f0f7f74d2ee14524341cf2c266459208c5eb6380da07f9948f740e1c6c7f23
MD5 4865c49cb1a7d51abea58a657348dbcc
SHA1 8d84b6019874cc946ae4dbeeba5df6bca5023c65
SHA512 79d00f6eb44b0ba4e41e9e50daf3cd02e0aea47ae94b891b5cc8833ebf90d01443605e3c161c492c220391ddf889730c2928acd2772f1d5ef3be2910c61167fb
SSDEEP 196608:x3M8XjtLCTwUNqFnsp4r0JGu9pWPNIbdCPe:JMUjlCT4F04sGEWPNIMe
TLSH
T13DD63A11BE9B5958D18ACCB0C34B8AA78E2130DF093AB4BF44CA52293F7D7F55F19219
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8304928

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

steamunlocked_launcher.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlNtStatusToDosError NtDeviceIoControlFile NtReadFile NtCancelIoFileEx NtWriteFile NtCreateNamedPipeFile RtlGetVersion NtOpenFile NtCreateFile

kernel32

DuplicateHandle DeleteFileW GetFinalPathNameByHandleW CopyFileExW MoveFileExW CreateSymbolicLinkW SetWaitableTimer SetFilePointerEx FindNextFileW GetModuleFileNameW GetFileAttributesW GetWindowsDirectoryW LoadLibraryA GetVolumePathNameW GetDiskFreeSpaceW GetProcAddress GetSystemInfo GetModuleHandleA TerminateProcess GetSystemDirectoryW IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime IsDebuggerPresent RtlPcToFileHeader RaiseException EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree GetUserDefaultUILanguage LCIDToLocaleName UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep CompareStringOrdinal SetFileCompletionNotificationModes CloseHandle HeapAlloc GetLastError SwitchToThread lstrlenW ExitProcess GetFileInformationByHandleEx HeapReAlloc HeapFree GetProcessHeap SetEnvironmentVariableW GetCommandLineW FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter QueryPerformanceFrequency GetEnvironmentVariableW GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext AddVectoredExceptionHandler GetFileInformationByHandle GetCurrentThread CreateMutexW CreateWaitableTimerExW DeviceIoControl CreateProcessW CreateDirectoryW CreateThread WriteFileEx ReadFileEx WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle CreateMutexA FindClose SetThreadStackGuarantee FindFirstFileExW SetFileInformationByHandle SetFileTime GetFullPathNameW SetNamedPipeHandleState SetHandleInformation FormatMessageW SleepEx MultiByteToWideChar WaitForSingleObject ReleaseMutex CreateFileW WideCharToMultiByte GetCurrentProcessId GetCurrentProcess WaitForSingleObjectEx SetLastError GetQueuedCompletionStatusEx PostQueuedCompletionStatus CreateIoCompletionPort InitializeCriticalSectionAndSpinCount CancelIoEx WriteFile GetOverlappedResult ReadFile RtlLookupFunctionEntry DeleteCriticalSection GetCurrentThreadId GetModuleHandleW GetSystemTimePreciseAsFileTime RtlUnwindEx LoadLibraryW InitializeSListHead GetTempPathW FreeLibrary LoadLibraryExW OutputDebugStringW LoadLibraryExA OutputDebugStringA

shell32

SHCreateItemFromParsingName Shell_NotifyIconGetRect SHAppBarMessage DragFinish DragQueryFileW ShellExecuteW ILCreateFromPathW SHOpenFolderAndSelectItems Shell_NotifyIconW ILFree ShellExecuteExW SHGetKnownFolderPath

ole32

CoUninitialize CoCreateFreeThreadedMarshaler CoInitialize OleInitialize CoCreateInstance RegisterDragDrop CoInitializeEx RevokeDragDrop CoTaskMemAlloc CoTaskMemFree

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

EventUnregister RegCloseKey RegOpenKeyExW SystemFunction036 RegGetValueW RegQueryValueExW EventRegister EventSetInformation EventWriteTransfer

user32

InvalidateRect SetCursorPos GetForegroundWindow FlashWindowEx IsWindowEnabled EnableWindow IsIconic IsWindowVisible GetAsyncKeyState SetPropW MonitorFromRect EnableMenuItem SetMenuItemInfoW VkKeyScanW SetWindowTextW GetWindowTextW GetWindowTextLengthW SetWindowDisplayAffinity GetKeyState IsWindow RegisterTouchWindow GetMonitorInfoW DestroyAcceleratorTable ScreenToClient AdjustWindowRectEx DrawMenuBar GetMenu GetWindowLongW SetCapture RegisterRawInputDevices SystemParametersInfoW CheckMenuItem InsertMenuW AppendMenuW GetCursorPos ReleaseCapture ClientToScreen SetForegroundWindow TrackPopupMenu MonitorFromWindow CloseTouchInputHandle GetDC GetWindowPlacement TrackMouseEvent SetWindowPlacement ChangeDisplaySettingsExW UpdateWindow ClipCursor GetSystemMetrics GetClipCursor ShowCursor SetWindowLongW GetSystemMenu InvalidateRgn ToUnicodeEx GetKeyboardLayout MapVirtualKeyExW GetKeyboardState FindWindowExW GetMenuItemInfoW FindWindowW ChangeWindowMessageFilterEx RegisterClassW CreatePopupMenu MapVirtualKeyW GetUpdateRect ValidateRect GetRawInputData LoadCursorW CreateMenu GetParent EnumChildWindows DispatchMessageA GetMessageA SetWindowPos CreateWindowExW RegisterClassExW RedrawWindow AdjustWindowRect EnumDisplayMonitors MonitorFromPoint TranslateAcceleratorW MsgWaitForMultipleObjectsEx DispatchMessageW TranslateMessage GetMessageW PeekMessageW PostThreadMessageW DestroyWindow DefWindowProcW SetWindowLongPtrW GetWindowLongPtrW SetWindowRgn KillTimer RegisterWindowMessageA SetTimer SetCursor GetWindow SetParent CreateAcceleratorTableW SetFocus SystemParametersInfoA DrawIconEx DrawTextW ReleaseDC FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo DestroyIcon CreateIcon DestroyMenu RemoveMenu SetMenu PostMessageW GetActiveWindow SendInput ShowWindow SendMessageW PostQuitMessage IsProcessDPIAware GetTouchInputInfo

gdi32

BitBlt SelectObject DeleteDC CreateRectRgn CombineRgn CreateDIBSection CreateCompatibleDC CreateSolidBrush GetDeviceCaps SetBkMode SetTextColor DeleteObject

comctl32

SetWindowSubclass DefSubclassProc RemoveWindowSubclass TaskDialogIndirect

oleaut32

SysStringLen GetErrorInfo SetErrorInfo SysFreeString

shlwapi

SHCreateMemStream

dwmapi

DwmEnableBlurBehindWindow DwmSetWindowAttribute DwmGetWindowAttribute

bcrypt

BCryptGenRandom

ws2_32

shutdown send recv accept listen freeaddrinfo getaddrinfo WSACleanup WSAStartup WSASend bind connect getsockopt getsockname WSAGetLastError getpeername closesocket WSAIoctl ioctlsocket WSASocketW setsockopt

crypt32

CertEnumCertificatesInStore CertAddCertificateContextToStore CertDuplicateCertificateChain CertSetCertificateContextProperty CertAddEncodedCertificateToStore CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertOpenStore CertVerifyCertificateChainPolicy CertFreeCertificateContext CertCloseStore CertDuplicateCertificateContext CertDuplicateStore CertGetCertificateChain CertFreeCertificateChain

secur32

EncryptMessage QueryContextAttributesW DeleteSecurityContext DecryptMessage AcquireCredentialsHandleA FreeContextBuffer InitializeSecurityContextW ApplyControlToken FreeCredentialsHandle AcceptSecurityContext

api-ms-win-crt-math-l1-1-0

round trunc pow roundf floor __setusermatherr

api-ms-win-crt-string-l1-1-0

strcpy_s strcmp wcsncmp wcscmp _wcsicmp wcslen strlen

api-ms-win-crt-heap-l1-1-0

_callnewh calloc free malloc _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_set_app_type _register_onexit_function _initialize_narrow_environment _get_initial_narrow_environment _initterm _initterm_e exit _exit _initialize_onexit_table _register_thread_local_exe_atexit_callback _c_exit terminate _crt_atexit __p___argc _wassert abort _seh_filter_exe _configure_narrow_argv _cexit __p___argv

api-ms-win-crt-utility-l1-1-0

_rotl64

api-ms-win-crt-convert-l1-1-0

_wtoi wcstol _ultow_s

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale