cs2 hackvshack[.]net[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
cs2 hackvshack.net.dll
Size 5.6MB
Sample260827-bb6kjsfh99
SHA256 d0f97a3fe7dd2d4f889c34c7f5b233aed609578bc367425bdefdc3c8e56b6372
MD5 005d07a330be4894bf6b3a58f54a092d
SHA1 c66853d6d758be96806acfdb5c6fc3d7ff0695e6
SHA512 f4218088bea09c180488c664ccc4262efb55fe3f2311d01955c50d9cf0c0708196778baa3eda8edbe939c25ff3a3e0f1bcda1a583628bc5f220e646a396d3b28
SSDEEP 98304:EenjosXz1U3a9kvZIToj4uBXwNSpTRg83j/Gg:v3ivZITAwNSNRLz/Gg
TLSH
T17B46CF13F74251AEC92AD43886AB9722B331B805573257DF62485F35AE937E02F3A7C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cs2 hackvshack.net.dll

File Explorer

cs2 hackvshack.net.dll

.dll 5.6MB

cs2 hackvshack.net.dll

IMPHASH 9f2c5178771a33aca6f67ac5f7997a50
SHA256 d0f97a3fe7dd2d4f889c34c7f5b233aed609578bc367425bdefdc3c8e56b6372
MD5 005d07a330be4894bf6b3a58f54a092d
SHA1 c66853d6d758be96806acfdb5c6fc3d7ff0695e6
SHA512 f4218088bea09c180488c664ccc4262efb55fe3f2311d01955c50d9cf0c0708196778baa3eda8edbe939c25ff3a3e0f1bcda1a583628bc5f220e646a396d3b28
SSDEEP 98304:EenjosXz1U3a9kvZIToj4uBXwNSpTRg83j/Gg:v3ivZITAwNSNRLz/Gg
TLSH
T17B46CF13F74251AEC92AD43886AB9722B331B805573257DF62485F35AE937E02F3A7C1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1333600

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\prodo\OneDrive\Desktop\velocity-fixed-main\cs2\velocity-cs2\..\bin\cs2.pdb

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler AreFileApisANSI CloseHandle CompareStringW CopyFileW CreateDirectoryW CreateFileA CreateFileMappingA CreateFileW CreateProcessW CreateThread DecodePointer DeleteCriticalSection DeleteFileW DisableThreadLibraryCalls EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetExitCodeProcess GetFileAttributesExW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileType GetFinalPathNameByHandleW GetLastError GetLocalTime GetLocaleInfoEx GetLocaleInfoW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTempPathW GetTickCount64 GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GlobalAlloc GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitOnceBeginInitialize InitOnceComplete InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OutputDebugStringA QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetFilePointer SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualProtect WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

shell32

SHGetFolderPathW ShellExecuteA ShellExecuteW

user32

CloseClipboard CreateWindowExA DefWindowProcA DestroyWindow EmptyClipboard GetAsyncKeyState GetClipboardData GetCursorPos GetSystemMetrics GetWindowLongPtrW LoadCursorW MapVirtualKeyW MessageBoxA OpenClipboard RegisterClassExA SetClipboardData SetCursor SetCursorPos UnregisterClassA wsprintfW

advapi32

RegCloseKey RegCreateKeyExW RegDeleteValueW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW

ole32

CoCreateInstance CoInitializeEx CreateStreamOnHGlobal

api-ms-win-core-synch-l1-2-0

WaitOnAddress

d3d11

D3D11CreateDeviceAndSwapChain

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2.0MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.retplne

Size

512B

Virtual Size

200B

Characteristics

Name

.tls

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_addr

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cs2 hackvshack.net.dll

kernel32

shell32

user32

advapi32

ole32

api-ms-win-core-synch-l1-2-0

d3d11

generic