skinchangercsgo[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

skinchangercsgo.dll
Size

598KB
MD5

748cf11ea857aa389d3e0d77762ecaa7
SHA1

97caf9c8051d55e97fc49f01083e5262c9ea12ac
SHA256

f132090cf40d81b7eb7649154fc9083805ef363d7fe4efbc8d379bf058081e93
SHA512

be9589c0a6cc67c7f91d586706db4e12dc9c2d0080650d8105f6a452e011e166fcba89311503a8ab79dc0ce5e869308007f04fea399d669a96751f0ba18a2038
SSDEEP

12288:TIOM1+Ce87tiIh+p+uTaAsnSvKtkIRyPZuuvAtynsK26T3MMDqo:TIOM5w+umcGk7oK2A3MMDqo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
skinchangercsgo.dll

Files

skinchangercsgo.dll
.dll windows:6 windows x86 arch:x86

69aa06a2f0d534ce1a8d5bc4f5f2b83b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

QueryPerformanceFrequency
QueryPerformanceCounter
DisableThreadLibraryCalls
CreateThread
GetCurrentProcess
GetModuleHandleA
Sleep
K32GetModuleInformation
GetProcAddress
VirtualQuery
WriteConsoleW
HeapSize
SetStdHandle
GlobalUnlock
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetFileSizeEx
HeapReAlloc
GetConsoleCP
GlobalLock
GetProcessHeap
GlobalAlloc
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
CloseHandle
GetLastError
SetLastError
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
FormatMessageW
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
TerminateProcess
RtlUnwind
RaiseException
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ReadFile
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
HeapAlloc
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
WriteFile

user32

SetWindowLongW
GetKeyState
GetCapture
ClientToScreen
SetCapture
SetCursor
CallWindowProcW
ReleaseCapture
SetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetClientRect

imm32

ImmSetCompositionWindow
ImmGetContext

Sections

.text
Size: 454KB - Virtual size: 453KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

69aa06a2f0d534ce1a8d5bc4f5f2b83b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

imm32

Sections

.text Size: 454KB - Virtual size: 453KB

.rdata Size: 98KB - Virtual size: 97KB

.data Size: 9KB - Virtual size: 145KB

_RDATA Size: 19KB - Virtual size: 18KB

.reloc Size: 17KB - Virtual size: 17KB

.text
Size: 454KB - Virtual size: 453KB

.rdata
Size: 98KB - Virtual size: 97KB

.data
Size: 9KB - Virtual size: 145KB

_RDATA
Size: 19KB - Virtual size: 18KB

.reloc
Size: 17KB - Virtual size: 17KB