RazeHack_unknowncheats[.]me_ (1)[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
RazeHack_unknowncheats.me_ (1).dll
Size 2.1MB
Sample260825-3v7eqsbb98
SHA256 8a886520fe8b7748afc28b127a50ef93aecfde1127dcf46ce5a9812da7b33ebc
MD5 08a8e46b5c73c959104b7e162ce8f525
SHA1 34fde2411a6e7c3c106869ef203874d060b4f242
SHA512 b4e2f233e986cc6bd4cd7da050827d7b31927db0cce9606c7e04748138b790390c71ad477573a65c8afd136b9a1fe8c78ad1dbd0a42bf98bd100dd4e2b7b2344
SSDEEP 24576:O7j0P78AcXF05tN2OQD08QAlLKLuIsCiyq3c/t2qhh0lhSMXlQSW2I9eno8YdCtv:qm4itNbsCnuc1oASW2XttYTPMa+B
TLSH
T163A5AE42F682D475D94A077820AFF7BA66386D55DB528FC3B2A87F6CAB721C01C7160C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RazeHack_unknowncheats.me_ (1).dll

File Explorer

RazeHack_unknowncheats.me_ (1).dll

.dll 2.1MB

RazeHack_unknowncheats.me_ (1).dll

IMPHASH 37beb82371368c4faa70b06dd8e230e5
SHA256 8a886520fe8b7748afc28b127a50ef93aecfde1127dcf46ce5a9812da7b33ebc
MD5 08a8e46b5c73c959104b7e162ce8f525
SHA1 34fde2411a6e7c3c106869ef203874d060b4f242
SHA512 b4e2f233e986cc6bd4cd7da050827d7b31927db0cce9606c7e04748138b790390c71ad477573a65c8afd136b9a1fe8c78ad1dbd0a42bf98bd100dd4e2b7b2344
SSDEEP 24576:O7j0P78AcXF05tN2OQD08QAlLKLuIsCiyq3c/t2qhh0lhSMXlQSW2I9eno8YdCtv:qm4itNbsCnuc1oASW2XttYTPMa+B
TLSH
T163A5AE42F682D475D94A077820AFF7BA66386D55DB528FC3B2A87F6CAB721C01C7160C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

952097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\Backup v2 25-3-2025\Proyecto de L4D2 V2 ImGui\Pruebas versiones imgui swonedL4D2\HackSeoWeoned Terminado\SeownedL4DRazeHackPublicUC\SeownedL4DRazeHack\SEOwnedDE\DLL_RazeHack\RazeHack.pdb

user32

CallWindowProcA ClientToScreen CloseClipboard EmptyClipboard FindWindowA GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyState GetKeyboardLayout GetMessageExtraInfo IsWindowUnicode LoadCursorA MessageBoxA OpenClipboard ReleaseCapture ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetWindowLongA TrackMouseEvent wsprintfW

kernel32

AcquireSRWLockExclusive AreFileApisANSI CloseHandle CreateDirectoryW CreateFileW CreateThread CreateToolhelp32Snapshot FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushInstructionCache FormatMessageA FreeLibraryAndExitThread GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetFileAttributesExW GetFileInformationByHandleEx GetLastError GetLocaleInfoA GetLocaleInfoEx GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemTimeAsFileTime GetThreadContext GetTickCount GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapCreate HeapDestroy HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitializeSListHead IsDebuggerPresent IsProcessorFeaturePresent K32GetModuleInformation LoadLibraryA LocalFree MultiByteToWideChar OpenThread QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive ResumeThread SetFileInformationByHandle SetThreadContext SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SuspendThread TerminateProcess Thread32First Thread32Next UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualProtect VirtualQuery WakeAllConditionVariable WideCharToMultiByte

gdi32

GetPixel

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ??0_Lockit@std@@QAE@H@Z ??0ios_base@std@@IAE@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??1_Lockit@std@@QAE@XZ ??1ios_base@std@@UAE@XZ ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Syserror_map@std@@YAPBDH@Z ?_Winerror_map@std@@YAHH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPBD@Z ?_Xout_of_range@std@@YAXPBD@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z _Query_perf_counter _Query_perf_frequency

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dx9_43

D3DXCreateTextureFromFileInMemoryEx

vcruntime140

_CxxThrowException __CxxFrameHandler3 __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_destroy_list __std_type_info_hash _except_handler4_common memchr memcmp memcpy memmove memset strstr

api-ms-win-crt-heap-l1-1-0

_callnewh free malloc

api-ms-win-crt-runtime-l1-1-0

_cexit _configure_narrow_argv _crt_atexit _errno _execute_onexit_table _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _invoke_watson _register_onexit_function _seh_filter_dll abort

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func localeconv

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vsscanf __stdio_common_vswprintf_s _fseeki64 _get_stream_buffer_pointers _wfopen fclose fflush fgetc fgetpos fputc fread fseek fsetpos ftell fwrite setvbuf ungetc

api-ms-win-crt-math-l1-1-0

_dsign acos atan atan2 cos fmod log lroundf pow remainderf sin sqrt tan

api-ms-win-crt-time-l1-1-0

_localtime64_s _time64

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-convert-l1-1-0

atof strtod strtoll strtoul strtoull

api-ms-win-crt-utility-l1-1-0

qsort rand

api-ms-win-crt-string-l1-1-0

strcmp strcpy_s strlen strncmp strncpy wcslen

Name

.text

Size

927KB

Virtual Size

926KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

822KB

Virtual Size

822KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

395KB

Virtual Size

438KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

424B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

RazeHack_unknowncheats.me_ (1).dll

user32

kernel32

gdi32

msvcp140

imm32

d3dx9_43

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

generic