Quint cs2_[unknowncheats[.]me]_[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
Quint cs2_[unknowncheats.me]_.dll
Size 3.7MB
Sample260709-dpdsssb19m
SHA256 85cce18cc1b0a9b01bb2684bfb9a12d957fa5ccab2c92550b8fbb2cf8ed76c80
MD5 89e757b0e7724e91003b96bcea74938b
SHA1 ee069aeecfa4ca3a3433cbd922bf459d8940f5a5
SHA512 69fa0e087f83b1cbb518d2d2e46d40c1f83dba67d4764ca299c3154559a8719fa9569934bab82bdae887a1c107c5cb572b20e1c0e6790016308181a1ffdf470c
SSDEEP 49152:C0Rt0IB7+TXpnTCVOe1DlqQPPsCDftAIS6AC4X8MB5rYnT25ERxFTB8tB8YTOW2U:tCp0zPPDtA8AC8T1208
TLSH
T1EA06BE17B3A502ACC666D0788A93971BF7717804072297DF22E50A656FB77F00FBA391
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Quint cs2_[unknowncheats.me]_.dll

File Explorer

Quint cs2_[unknowncheats.me]_.dll

.dll 3.7MB

Quint cs2_[unknowncheats.me]_.dll

IMPHASH e4c7ae41ca64b4f7607c7c36b4653dde
SHA256 85cce18cc1b0a9b01bb2684bfb9a12d957fa5ccab2c92550b8fbb2cf8ed76c80
MD5 89e757b0e7724e91003b96bcea74938b
SHA1 ee069aeecfa4ca3a3433cbd922bf459d8940f5a5
SHA512 69fa0e087f83b1cbb518d2d2e46d40c1f83dba67d4764ca299c3154559a8719fa9569934bab82bdae887a1c107c5cb572b20e1c0e6790016308181a1ffdf470c
SSDEEP 49152:C0Rt0IB7+TXpnTCVOe1DlqQPPsCDftAIS6AC4X8MB5rYnT25ERxFTB8tB8YTOW2U:tCp0zPPDtA8AC8T1208
TLSH
T1EA06BE17B3A502ACC666D0788A93971BF7717804072297DF22E50A656FB77F00FBA391
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1821040

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\kamis\Desktop\Нова папка (2)\x64\Release\Quint cs2.pdb

ntdll

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlUnwindEx RtlPcToFileHeader RtlUnwind NtAllocateVirtualMemory NtProtectVirtualMemory

kernel32

GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter VirtualFree GetCurrentProcess GetSystemInfo VirtualQuery HeapCreate HeapFree Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetCurrentProcessId GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread GetModuleFileNameA GetCurrentDirectoryA GetConsoleWindow SetThreadAffinityMask SetPriorityClass SetThreadPriority GetQueuedCompletionStatus WaitForSingleObject PostQueuedCompletionStatus GetCurrentThread CreateIoCompletionPort CreateThread GetModuleHandleA GetFileSizeEx ReadFile GetProcessHeap MapViewOfFile UnmapViewOfFile CreateFileMappingA HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage GetConsoleOutputCP WriteFile FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc GetFileType GetStdHandle ReadConsoleW GetConsoleMode SetFilePointerEx GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GetModuleFileNameW GlobalAlloc MultiByteToWideChar SetStdHandle SetEndOfFile WriteConsoleW CreateFileA UnhandledExceptionFilter GetModuleHandleExW ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RaiseException ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI GetLastError GetFileInformationByHandleEx TryAcquireSRWLockExclusive GetNativeSystemInfo EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo InterlockedFlushSList

user32

EmptyClipboard CloseClipboard OpenClipboard SetClipboardData SetCursorPos ReleaseCapture GetClipboardData GetCursorPos IsWindowUnicode GetWindowThreadProcessId GetWindow IsWindowVisible SetWindowLongPtrW EnumWindows CallWindowProcW GetKeyState GetMessageExtraInfo ScreenToClient ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect GetCapture

shell32

ShellExecuteW

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

d3dcompiler_47

D3DCompile