General

  • Target
    ae.any
  • Size 13.9MB
  • Sample260825-ryh1rstdmb
  • SHA256 2f5ec898a345186f8d6db676504bc2416980de92dcd51c34cc6ea2527eeaa6e8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • ae.any
    .exe 13.9MB

ae.any

  • IMPHASH 2c2d6ea643929be3c46606de276453c2
  • SHA256 2f5ec898a345186f8d6db676504bc2416980de92dcd51c34cc6ea2527eeaa6e8
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
9f:60:e5:21:a6:fd:a9:41:c6:0d:5a:00:15:d6:f7:89:13:16:91:92:52:88:a0:a2:0b:20:13:12:d3:57:44:9d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
Minor OS version
0
Major OS version
6
Entry point
4760
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\buildworker\steam_main_win32\build\src\drivers\win32\Release\drivers.pdb