General

  • Target
    steam_api64.dll
  • Size 817KB
  • Sample260804-tqhfdade53
  • SHA256 dc5df489f5cff9c5a7541742dac5aaf02219b80decbc373f6d34d2dbcefbe69b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • steam_api64.dll
    .dll 817KB

steam_api64.dll

  • IMPHASH 9afc8001e389a877423ff42347b40c62
  • SHA256 dc5df489f5cff9c5a7541742dac5aaf02219b80decbc373f6d34d2dbcefbe69b
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

Password
cs

PE Signature issue

Digest
4d:0d:9b:97:bc:d5:fa:33:9c:5f:6a:87:00:86:32:77:01:83:f3:47:63:35:9d:05:78:6d:7e:3a:c2:93:a4:c9
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
Minor OS version
0
Major OS version
6
Entry point
337584
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths