The steam api64 dll File Malware Analysis

Technical Analysis

File Name	steam_api64.dll
File Type	PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version	1.0.218.174
Database Version	2025-06-18 01:00:26 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	e973fa17d60044cae256762bc8329b3d
SHA1	7375d3784d1d0a82943bf0c4c4b2dbd3d4a586eb
SHA256	23d2490cfcd95b1756dcce56e839888de44d1e6ea41edebafa5456dbb1e02454
SHA512	f1f618a4e57a83003dfeb87ffa7f29c3b6445ddb291ed61a2501166fb9e76268bae9f23029ba8c5e75e1b2c9cc28d824df6cfa6f926226316bff88cae5f95fc6
ImpHash	81fdc05c9493f5b700c4b50d12d576b0

PE Analysis

Basic Information

▼

Image Base	`0x180000000`
Entry Point	`0x180592d68`
Compilation Time	2023-06-02 06:44:53
Checksum	0x00000000 (Actual: 0x00903bb0)
OS Version	6.0
PEiD Signatures	`PE32+ executable (DLL) (GUI) x86-64, for MS Windows`
PDB Path	`E:\work\THQNordicOnlineSrc\ServerClient\build\SteamWrapperAPI\Release\steam_api64.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	24 libraries
Exports	1068 functions
Resources	1 Resources
Sections	9 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	6,609,356 bytes	6,609,408 bytes	6.51 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`206105F3ADC82A933F418090CF694F8A`
`.rdata`	`0x0064f000`	2,032,500 bytes	2,032,640 bytes	5.54 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B8D3BEBBC2CCEF470CD0EA3BA40BF2C1`
`.data`	`0x00840000`	2,969,408 bytes	377,344 bytes	5.16 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`4A9B9ADE2A4A5FCD942A0783598C56CA`
`.pdata`	`0x00b15000`	289,284 bytes	289,792 bytes	6.37 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`A0B9E1EA2B3BE0FC594557F30479C362`
`.detourc`	`0x00b5c000`	8,640 bytes	8,704 bytes	2.89 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`B9EA98112440E57EA4C5BAAC15BE9F6D`
`.detourd`	`0x00b5f000`	24 bytes	512 bytes	0.12 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`EDDA25907019E5CC74C177F6952E5E4B`
`.rsrc`	`0x00b60000`	480 bytes	512 bytes	4.71 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`D41F9507A416D2C327B7B509EEFB61DC`
`.reloc`	`0x00b61000`	80,324 bytes	80,384 bytes	5.46 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`B34ACCCBD2D88C1DE399A48B52C41577`
`HLM`	`0x00b75000`	18,944 bytes	18,784 bytes	4.82 (Normal)	`IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`018DD7D470D56843EEA3645A6D2A5CC7`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 1 (381 bytes)

Resource Type	Count	Total Size	Percentage
RT_MANIFEST	1	381 bytes	100%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The steam_api64.dll File Analysis