steam-fix.zip
- SHA256 da78cd82c29a0d2f07fbee35e678dbd67ca7ab2912e83800eddf56b0f62c85b1
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Steam.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Steam.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target steam-fix.zip
- Size 206KB
- Sample260916-tkrrvsdk4x
- SHA256 da78cd82c29a0d2f07fbee35e678dbd67ca7ab2912e83800eddf56b0f62c85b1
- MD5 d6191b62536896d60072be16dc5e51f1
- SHA1 d520a81bf5e6435fd562a56ba6b5ef88d275a810
- SHA512 7b67c8aaceb7b22866d926e1e655cfce2329a00a238f2c8691705418435f357d8fb5f4849f6f82e13482d199b8917250e5c92aaede046df4025c0c7122c47db9
- SSDEEP 6144:9BfTzlHmO5Ss6tYL71ZPwm72q2Hr5BZGqmsRL59BAQGfFZ:9BfBL85EeqMLZGDsH9BDGfL
- TLSH T1ED2423394A51FAD99F738D44D61E879836C42DB3D2729D10BB2127E1F6908B23BF81C2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Insecure Codesign Algorithm 1 IoCs
File was codesigned using an insecure algorithm.
resource unpack001/Steam.dll
File Explorer
-
steam-fix.zip.zip 206KB
-
Steam.dll.dll 421KB
Steam.dll
- IMPHASH ff27d1e7103e50fe981f1ec3ffcc4f98
- SHA256 abdad3b9c2d7d6bc27ccdc013789e178baf574e6ca0ac68632d3b3a7e88a38e8
- MD5 3b92caa2c16fee595c9d8f764f918648
- SHA1 c257db1e2c44e9d860e32e43cba5ea2f7cc3f396
- SHA512 dbca47159e69e84d3712fc7ea7965be506750335e40fe603428fc2701c1a539002484ddaa2b7f4ec3fba5036810e9c64df328c8425c646f622974f26282bc720
- SSDEEP 12288:09ytPjfqhROXWJYxzwqgAlHCRjO5QOz+tAH4gKG5yhd4G:09ytun+GY+qgAuMQOqmH4gKlIG
- TLSH T1E7949D13B903C032D8AD4574997CEF331A5C5EB91B7CE0D7EB98686A6EB04D32B35606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Insecure Codesign Algorithm
File was codesigned using an insecure algorithm.
Digest
a8:85:da:5e:29:5e:47:f8:f4:ca:6f:c9:3c:26:63:58:8f:62:71:63
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Chains
Dec 20, 2020
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Serial Number
05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 4, 2018 - Oct 7, 2021
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 22, 2013 - Oct 22, 2028
Minor OS version
1
Major OS version
5
Entry point
175532
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\buildslave\steam_rel_client_win32\build\src\steam2wrapper\Release\steam.pdb
shell32
ShellExecuteW
CommandLineToArgvW
kernel32
CloseHandle
LoadLibraryExA
LoadLibraryExW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetCommandLineW
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
DeviceIoControl
FindClose
CreateFileW
FindFirstFileW
GetLastError
VerSetConditionMask
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
LocalFree
GetCurrentProcess
GetCurrentProcessId
SetLastError
Sleep
WriteFile
LoadLibraryA
DeleteCriticalSection
CreateDirectoryW
GetFullPathNameW
CreateFileA
DeleteFileW
FindNextFileA
MoveFileExW
GetVersionExA
VerifyVersionInfoW
GetTimeZoneInformation
SetStdHandle
LCMapStringW
CompareStringW
GetConsoleCP
GetStringTypeW
GetACP
GetStdHandle
SetFilePointerEx
ReadConsoleW
GetConsoleMode
ExitProcess
InitializeCriticalSection
GetExitCodeProcess
OpenProcess
GetCommandLineA
GetEnvironmentVariableA
GetProcAddress
FreeLibrary
OutputDebugStringA
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
HeapReAlloc
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
WriteConsoleW
DecodePointer
SetEnvironmentVariableA
GetFullPathNameA
FindFirstFileExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
VirtualQuery
EncodePointer
InterlockedFlushSList
FindNextFileW
GetDiskFreeSpaceA
GetDriveTypeW
RtlUnwind
InitializeSListHead
GetStartupInfoW
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
SleepEx
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalMemoryStatusEx
VirtualAlloc
GetProcessHeap
HeapLock
HeapUnlock
HeapWalk
HeapSetInformation
HeapQueryInformation
TerminateProcess
IsDebuggerPresent
RaiseException
CreateThread
GetCurrentThread
OpenThread
TerminateThread
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateEventA
InterlockedCompareExchange
LocalAlloc
GetModuleFileNameA
InterlockedExchangeAdd
HeapAlloc
HeapFree
HeapSize
HeapValidate
InterlockedExchange
DebugBreak
GetProcessHeaps
SetUnhandledExceptionFilter
LoadLibraryW
GetTempPathW
GetCurrentDirectoryW
GetFileSizeEx
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFileTime
user32
GetWindowThreadProcessId
EnumWindows
GetWindowRect
IsWindowVisible
GetDesktopWindow
MessageBoxA
GetWindowTextLengthA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
wsprintfA
SetWindowPos
DialogBoxParamA
EndDialog
GetDlgItem
advapi32
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
oleaut32
VariantClear
psapi
GetProcessMemoryInfo
GetModuleFileNameExW
CreateInterface
SteamAbortCall
SteamAbortOngoingUserIDTicketValidation
SteamAckSubscriptionReceipt
SteamBlockingCall
SteamChangeAccountName
SteamChangeEmailAddress
SteamChangeForgottenPassword
SteamChangeOfflineStatus
SteamChangePassword
SteamChangePersonalQA
SteamCheckAppOwnership
SteamCleanup
SteamClearError
SteamCloseFile
SteamCreateAccount
SteamCreateCachePreloaders
SteamCreateLogContext
SteamDefragCaches
SteamDeleteAccount
SteamEnumerateApp
SteamEnumerateAppDependency
SteamEnumerateAppIcon
SteamEnumerateAppLaunchOption
SteamEnumerateAppVersion
SteamEnumerateSubscription
SteamEnumerateSubscriptionDiscount
SteamEnumerateSubscriptionDiscountQualifier
SteamFindApp
SteamFindClose
SteamFindFirst
SteamFindFirst64
SteamFindNext
SteamFindNext64
SteamFindServersGetErrorString
SteamFindServersIterateServer
SteamFindServersNumServers
SteamFlushCache
SteamFlushFile
SteamForceCellId
SteamForgetAllHints
SteamGenerateSuggestedAccountNames
SteamGetAccountStatus
SteamGetAppCacheSize
SteamGetAppDLCStatus
SteamGetAppDependencies
SteamGetAppDir
SteamGetAppIds
SteamGetAppPurchaseCountry
SteamGetAppStats
SteamGetAppUpdateStats
SteamGetAppUserDefinedInfo
SteamGetAppUserDefinedRecord
SteamGetCacheDecryptionKey
SteamGetCacheDefaultDirectory
SteamGetCacheFilePath
SteamGetCachePercentFragmentation
SteamGetContentServerInfo
SteamGetCurrentAppId
SteamGetCurrentCellID
SteamGetCurrentEmailAddress
SteamGetDepotParent
SteamGetEncryptedUserIDTicket
SteamGetEncryptionKeyToSendToNewClient
SteamGetFileAttributeFlags
SteamGetLocalClientVersion
SteamGetLocalFileCopy
SteamGetNumAccountsWithEmailAddress
SteamGetOfflineStatus
SteamGetSponsorUrl
SteamGetSubscriptionExtendedInfo
SteamGetSubscriptionIds
SteamGetSubscriptionPurchaseCountry
SteamGetSubscriptionReceipt
SteamGetSubscriptionStats
SteamGetTotalUpdateStats
SteamGetUser
SteamGetUserType
SteamGetVersion
SteamGetc
SteamHintResourceNeed
SteamInitializeUserIDTicketValidator
SteamInsertAppDependency
SteamIsAccountNameInUse
SteamIsAppSubscribed
SteamIsCacheLoadingEnabled
SteamIsFileImmediatelyAvailable
SteamIsFileNeededByApp
SteamIsFileNeededByCache
SteamIsLoggedIn
SteamIsSecureComputer
SteamIsSubscribed
SteamIsUsingSdkContentServer
SteamLaunchApp
SteamLoadCacheFromDir
SteamLoadFileToApp
SteamLoadFileToCache
SteamLog
SteamLogResourceLoadFinished
SteamLogResourceLoadStarted
SteamLogin
SteamLogout
SteamMiniDumpInit
SteamMountAppFilesystem
SteamMountFilesystem
SteamMoveApp
SteamNumAppsRunning
SteamOpenFile
SteamOpenFile64
SteamOpenFileEx
SteamOpenTmpFile
SteamOptionalCleanUpAfterClientHasDisconnected
SteamPauseCachePreloading
SteamPrintFile
SteamProcessCall
SteamProcessOngoingUserIDTicketValidation
SteamPutc
SteamReadFile
SteamRefreshAccountInfo
SteamRefreshAccountInfo2
SteamRefreshAccountInfoEx
SteamRefreshLogin
SteamReleaseCacheFiles
SteamRemoveAppDependency
SteamRepairOrDecryptCaches
SteamRequestAccountsByCdKeyEmail
SteamRequestAccountsByEmailAddressEmail
SteamRequestEmailAddressVerificationEmail
SteamRequestForgottenPasswordEmail
SteamResumeCachePreloading
SteamSeekFile
SteamSeekFile64
SteamSetAppCacheSize
SteamSetAppVersion
SteamSetCacheDefaultDirectory
SteamSetMaxStallCount
SteamSetNotificationCallback
SteamSetUser
SteamSetUser2
SteamSetvBuf
SteamShutdownEngine
SteamShutdownSteamBridgeInterface
SteamShutdownUserIDTicketValidator
SteamSizeFile
SteamSizeFile64
SteamStartEngine
SteamStartEngineEx
SteamStartLoadingCache
SteamStartValidatingNewValveCDKey
SteamStartValidatingUserIDTicket
SteamStartup
SteamStat
SteamStat64
SteamStopLoadingCache
SteamSubscribe
SteamTellFile
SteamTellFile64
SteamUninstall
SteamUnmountAppFilesystem
SteamUnmountFilesystem
SteamUnsubscribe
SteamUpdateAccountBillingInfo
SteamUpdateSubscriptionBillingInfo
SteamVerifyEmailAddress
SteamVerifyPassword
SteamWaitForAppReadyToLaunch
SteamWaitForAppResources
SteamWaitForResources
SteamWasBlobRegistryDeleted
SteamWriteFile
SteamWriteMiniDumpFromAssert
SteamWriteMiniDumpSetComment
SteamWriteMiniDumpUsingExceptionInfo
SteamWriteMiniDumpUsingExceptionInfoWithBuildId
SteamWriteMiniDumpWithAppID
_f
g_dwDllEntryThreadId
Name
.text
Size
295KB
Virtual Size
294KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
94KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
386KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ