steam_api[.]dll | Triage™

General

Target
steam_api.dll
Size 249KB
Sample261015-1pschsdz5m
SHA256 b4e4e7d4279c3afbd5c4e88fee949f587a3ff5416b7c153dc5b4ad49262ceb55
MD5 6c80af303e39a58ac0a4dd1ef2808f9e
SHA1 0841dc73043735016961dc6400cc0fb0829e0121
SHA512 0ddd34ce62dfda7a5864a97b127162b21a984b35712f6e1b76d19db7c312af38afcb1a0334bdcd58054ecd160bfbed8c31527e73613b7e8b50cd9573bdea7947
SSDEEP 3072:I8rodekGPKZZl6lg68yJbTYswHdVy+fD5CzDn0o5LWyGQE7tJL03VCCmSQMqI5ck:I8roUZP4zob1yIDn/lAoo7L6F7
TLSH
T1AD44125B667699F3E081973C1D2A7F0FFB7C689298F0094C531177E92CA252A14FA34B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
steam_api.dll

File Explorer

steam_api.dll

.dll 249KB

steam_api.dll

IMPHASH d4b39f3911e6af3562ea73abb447fb88
SHA256 b4e4e7d4279c3afbd5c4e88fee949f587a3ff5416b7c153dc5b4ad49262ceb55
MD5 6c80af303e39a58ac0a4dd1ef2808f9e
SHA1 0841dc73043735016961dc6400cc0fb0829e0121
SHA512 0ddd34ce62dfda7a5864a97b127162b21a984b35712f6e1b76d19db7c312af38afcb1a0334bdcd58054ecd160bfbed8c31527e73613b7e8b50cd9573bdea7947
SSDEEP 3072:I8rodekGPKZZl6lg68yJbTYswHdVy+fD5CzDn0o5LWyGQE7tJL03VCCmSQMqI5ck:I8roUZP4zob1yIDn/lAoo7L6F7
TLSH
T1AD44125B667699F3E081973C1D2A7F0FFB7C689298F0094C531177E92CA252A14FA34B
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

451552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

GetHSteamPipe GetHSteamUser SteamAPI_GetHSteamPipe SteamAPI_GetHSteamUser SteamAPI_GetSteamInstallPath SteamAPI_Init SteamAPI_InitSafe SteamAPI_IsSteamRunning SteamAPI_RegisterCallResult SteamAPI_RegisterCallback SteamAPI_RestartApp SteamAPI_RestartAppIfNecessary SteamAPI_RunCallbacks SteamAPI_SetBreakpadAppID SteamAPI_SetMiniDumpComment SteamAPI_SetTryCatchCallbacks SteamAPI_Shutdown SteamAPI_UnregisterCallResult SteamAPI_UnregisterCallback SteamAPI_UseBreakpadCrashHandler SteamAPI_WriteMiniDump SteamApps SteamClient SteamContentServer SteamContentServerUtils SteamContentServer_Init SteamContentServer_RunCallbacks SteamContentServer_Shutdown SteamController SteamFriends SteamGameServer SteamGameServerNetworking SteamGameServerStats SteamGameServerUtils SteamGameServer_BSecure SteamGameServer_GetHSteamPipe SteamGameServer_GetHSteamUser SteamGameServer_GetIPCCallCount SteamGameServer_GetSteamID SteamGameServer_Init SteamGameServer_InitSafe SteamGameServer_RunCallbacks SteamGameServer_Shutdown SteamHTTP SteamMasterServerUpdater SteamMatchmaking SteamMatchmakingServers SteamNetworking SteamRemoteStorage SteamScreenshots SteamUGC SteamUser SteamUserStats SteamUtils Steam_GetHSteamUserCurrent Steam_RegisterInterfaceFuncs Steam_RunCallbacks VR_GetControlPanel VR_Init VR_Shutdown g_pSteamClientGameServer

Name

.text

Size

Virtual Size

103KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.3DMGAME

Size

Virtual Size

131KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.3DMGAME

Size

247KB

Virtual Size

246KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

434B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

steam_api.dll

kernel32

user32

shell32

generic

Sharing

General

Malware Config

Signatures

File Explorer

steam_api.dll

kernel32

user32

shell32

generic