cynth-v2 hackvshack[.]net[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
cynth-v2 hackvshack.net.dll
Size 4.3MB
Sample261002-1d2rtavz7j
SHA256 f54c21e6291f2bd2682ce589bbd57509a0631398740e71b322328f23af759768
MD5 622e5cff97062b837005bdd03b669df4
SHA1 4d035df921b50425002f0aa3592af43c18d79c0c
SHA512 2e8e374a6621c0747cdc6f5d67974fe2d3bf99efb0bf91bf311ea493e80f810e1296f2f82ca4717d7903fcbf11baeeaca54f64bd0fe860fadd5b73226c0eef46
SSDEEP 49152:qgRpwMeKkwIs4Qw7PkPXLi2wbs+3TzVYZGoFcmYAxg0GNLYtEnTGhCQrWnlMB5r:4F73TJPjBNu6n
TLSH
T10426BF1272D941E9D037D17C8AAB9B07E6B2780523219BCB13E4865A1F67BE40FBF711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cynth-v2 hackvshack.net.dll

File Explorer

cynth-v2 hackvshack.net.dll

.dll 4.3MB

cynth-v2 hackvshack.net.dll

IMPHASH e1624a0abc734d915e14423176a65752
SHA256 f54c21e6291f2bd2682ce589bbd57509a0631398740e71b322328f23af759768
MD5 622e5cff97062b837005bdd03b669df4
SHA1 4d035df921b50425002f0aa3592af43c18d79c0c
SHA512 2e8e374a6621c0747cdc6f5d67974fe2d3bf99efb0bf91bf311ea493e80f810e1296f2f82ca4717d7903fcbf11baeeaca54f64bd0fe860fadd5b73226c0eef46
SSDEEP 49152:qgRpwMeKkwIs4Qw7PkPXLi2wbs+3TzVYZGoFcmYAxg0GNLYtEnTGhCQrWnlMB5r:4F73TJPjBNu6n
TLSH
T10426BF1272D941E9D037D17C8AAB9B07E6B2780523219BCB13E4865A1F67BE40FBF711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2258304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Jayden\source\repos\cynth-v2\bin\cynth-v2.pdb

kernel32

GetModuleFileNameW GetTickCount64 GetModuleFileNameA OutputDebugStringA WideCharToMultiByte GetCurrentProcess FlushInstructionCache VirtualAlloc CreateDirectoryA DeleteFileA FindClose FindFirstFileA FindNextFileA GetLastError GetModuleHandleExW LoadResource LockResource SizeofResource FindResourceW CreateThread DisableThreadLibraryCalls FreeLibrary FreeLibraryAndExitThread VerSetConditionMask QueryPerformanceCounter QueryPerformanceFrequency GetModuleHandleA LoadLibraryA MultiByteToWideChar GetLocaleInfoA IsDBCSLeadByte GlobalAlloc GlobalUnlock GlobalLock GlobalFree GetSystemInfo VirtualFree HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread WriteFile SetThreadContext VirtualProtect CreateToolhelp32Snapshot Thread32First Thread32Next ReadFile GetFileAttributesExW GetFileAttributesW CloseHandle RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ExitThread ExitProcess GetCurrentThread GetStdHandle GetFileType IsThreadAFiber LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW Sleep GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetConsoleOutputCP GetConsoleMode CreateFileW CreateDirectoryW GetProcAddress GetModuleHandleW GetFileSizeEx SetFilePointerEx ReadConsoleW SetConsoleCtrlHandler HeapSize HeapQueryInformation VirtualQuery GetThreadContext GetTimeZoneInformation WaitForSingleObject SetEvent CreateEventW RtlUnwind OutputDebugStringW SetEndOfFile WriteConsoleW SetStdHandle GetProcessHeap IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW

user32

DestroyWindow UnregisterClassW DefWindowProcW MessageBoxA GetAsyncKeyState GetKeyState CreateWindowExW RegisterClassExW ReleaseDC CallWindowProcW EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetProcessDPIAware LoadCursorW ClientToScreen SetCursor SetCursorPos GetClientRect MonitorFromWindow GetDC GetForegroundWindow IsWindowUnicode GetCursorPos ReleaseCapture SetCapture GetCapture GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout MapVirtualKeyA GetKeyNameTextA SetWindowLongPtrW GetWindowLongPtrW ClipCursor ScreenToClient

gdi32

GetDeviceCaps DeleteObject CreateRectRgn

shell32

ShellExecuteW

ole32

CoCreateFreeThreadedMarshaler CoUninitialize CoInitializeEx CoCreateInstance

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx TryAcquireSRWLockExclusive TryAcquireSRWLockShared AcquireSRWLockShared EnterCriticalSection LeaveCriticalSection WaitForSingleObjectEx AcquireSRWLockExclusive ReleaseSRWLockExclusive ReleaseSRWLockShared DeleteCriticalSection

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-core-synch-l1-2-0

InitOnceComplete SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitOnceBeginInitialize

api-ms-win-core-processenvironment-l1-1-0

GetCurrentDirectoryW SetCurrentDirectoryW

api-ms-win-core-file-l1-1-0

FindFirstFileExW FindNextFileW GetDiskFreeSpaceExW FindFirstFileW GetFileInformationByHandle GetFinalPathNameByHandleW GetFullPathNameW SetFileAttributesW SetFileTime SetFileInformationByHandle

api-ms-win-core-file-l1-2-0

GetTempPathW CreateFile2

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx CreateHardLinkW CreateSymbolicLinkW CopyFile2 MoveFileExW CreateDirectoryExW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-localization-l1-2-0

FormatMessageA LCMapStringEx GetLocaleInfoEx GetCPInfo

api-ms-win-core-processthreads-l1-1-0

SwitchToThread GetExitCodeThread GetStartupInfoW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetLogicalProcessorInformationEx

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-string-l1-1-0

GetStringTypeW CompareStringEx

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

dwmapi

DwmGetColorizationColor DwmIsCompositionEnabled DwmEnableBlurBehindWindow

imm32

ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext ImmGetContext

oleaut32

GetErrorInfo SysStringLen SysFreeString SetErrorInfo

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

688KB

Virtual Size

688KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

70KB

Virtual Size

115KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

141KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

573KB

Virtual Size

573KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cynth-v2 hackvshack.net.dll

kernel32

user32

gdi32

shell32

ole32

d3d11

d3dcompiler_47

api-ms-win-core-synch-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-io-l1-1-0

api-ms-win-core-file-l2-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-interlocked-l1-1-0

dwmapi

imm32

oleaut32

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

generic