cashout.dll

Description:

Authors:

Version:

Architecture: 64-bit

Operating System:

SHA256: 60159589e0bcbd7620e8d3518c69d117

File Size: 589.0 KB

Uploaded At: June 24, 2026, 7:20 p.m.

Views: 13

Security Warning

This file has been flagged as potentially dangerous.

Reason: Detected potentially dangerous functions used for process injection: OpenProcess, WriteProcessMemory

Exported Functions

CASHOUT_Version (Ordinal: 1, Address: 0x271b0)

Imported DLLs & Functions

ADVAPI32.dll

AllocateAndInitializeSid (Address: 0x18005f000)
CryptAcquireContextA (Address: 0x18005f040)
CryptCreateHash (Address: 0x18005f028)
CryptDestroyHash (Address: 0x18005f018)
CryptGetHashParam (Address: 0x18005f030)
CryptHashData (Address: 0x18005f020)
CryptReleaseContext (Address: 0x18005f038)
FreeSid (Address: 0x18005f080)
GetCurrentHwProfileA (Address: 0x18005f078)
RegCloseKey (Address: 0x18005f070)
RegDeleteTreeA (Address: 0x18005f048)
RegDeleteValueA (Address: 0x18005f068)
RegEnumKeyExA (Address: 0x18005f060)
RegEnumValueA (Address: 0x18005f058)
RegOpenKeyExA (Address: 0x18005f050)
SetEntriesInAclW (Address: 0x18005f010)
SetSecurityInfo (Address: 0x18005f008)

IPHLPAPI.DLL

GetAdaptersInfo (Address: 0x18005f090)

KERNEL32.dll

AcquireSRWLockExclusive (Address: 0x18005f3b0)
AllocConsole (Address: 0x18005f340)
CheckRemoteDebuggerPresent (Address: 0x18005f228)
CloseHandle (Address: 0x18005f230)
CompareStringW (Address: 0x18005f0f8)
CreateDirectoryA (Address: 0x18005f1b0)
CreateFileA (Address: 0x18005f1b8)
CreateFileW (Address: 0x18005f0c0)
CreateThread (Address: 0x18005f280)
CreateToolhelp32Snapshot (Address: 0x18005f378)
DebugBreak (Address: 0x18005f210)
DecodePointer (Address: 0x18005f400)
DeleteCriticalSection (Address: 0x18005f3e0)
DeleteFileA (Address: 0x18005f1c0)
DisableThreadLibraryCalls (Address: 0x18005f300)
DuplicateHandle (Address: 0x18005f238)
EncodePointer (Address: 0x18005f3f8)
EnterCriticalSection (Address: 0x18005f3c8)
EnumSystemLocalesW (Address: 0x18005f480)
ExitProcess (Address: 0x18005f270)
ExitThread (Address: 0x18005f468)
FindClose (Address: 0x18005f1c8)
FindFirstFileA (Address: 0x18005f1d0)
FindFirstFileExW (Address: 0x18005f158)
FindNextFileA (Address: 0x18005f1d8)
FindNextFileW (Address: 0x18005f150)
FlushFileBuffers (Address: 0x18005f180)
FlushInstructionCache (Address: 0x18005f2b0)
FreeConsole (Address: 0x18005f348)
FreeEnvironmentStringsW (Address: 0x18005f0a0)
FreeLibrary (Address: 0x18005f308)
FreeLibraryAndExitThread (Address: 0x18005f310)
GetACP (Address: 0x18005f140)
GetCommandLineA (Address: 0x18005f130)
GetCommandLineW (Address: 0x18005f128)
GetConsoleCP (Address: 0x18005f178)
GetConsoleMode (Address: 0x18005f350)
GetConsoleWindow (Address: 0x18005f370)
GetCPInfo (Address: 0x18005f420)
GetCurrentProcess (Address: 0x18005f260)
GetCurrentProcessId (Address: 0x18005f268)
GetCurrentThread (Address: 0x18005f288)
GetCurrentThreadId (Address: 0x18005f290)
GetDateFormatW (Address: 0x18005f0e8)
GetEnvironmentStringsW (Address: 0x18005f120)
GetEnvironmentVariableA (Address: 0x18005f1a8)
GetFileAttributesA (Address: 0x18005f1e0)
GetFileSizeEx (Address: 0x18005f470)
GetFileType (Address: 0x18005f478)
GetLastError (Address: 0x18005f240)
GetLocaleInfoW (Address: 0x18005f108)
GetLocalTime (Address: 0x18005f2c8)
GetModuleFileNameW (Address: 0x18005f198)
GetModuleHandleA (Address: 0x18005f318)
GetModuleHandleExW (Address: 0x18005f4c8)
GetModuleHandleW (Address: 0x18005f320)
GetOEMCP (Address: 0x18005f138)
GetProcAddress (Address: 0x18005f328)
GetProcessHeap (Address: 0x18005f0b0)
GetStartupInfoW (Address: 0x18005f458)
GetStdHandle (Address: 0x18005f1a0)
GetStringTypeW (Address: 0x18005f418)
GetSystemInfo (Address: 0x18005f2c0)
GetSystemTimeAsFileTime (Address: 0x18005f3e8)
GetTempPathA (Address: 0x18005f1f8)
GetThreadContext (Address: 0x18005f2a8)
GetTickCount64 (Address: 0x18005f2d0)
GetTimeFormatW (Address: 0x18005f0f0)
GetTimeZoneInformation (Address: 0x18005f160)
GetUserDefaultLCID (Address: 0x18005f4d0)
GetVolumeInformationA (Address: 0x18005f200)
HeapAlloc (Address: 0x18005f190)
HeapFree (Address: 0x18005f0e0)
HeapReAlloc (Address: 0x18005f168)
HeapSize (Address: 0x18005f0c8)
InitializeCriticalSectionAndSpinCount (Address: 0x18005f498)
InitializeCriticalSectionEx (Address: 0x18005f3d8)
InitializeSListHead (Address: 0x18005f460)
InterlockedFlushSList (Address: 0x18005f490)
IsDebuggerPresent (Address: 0x18005f208)
IsProcessorFeaturePresent (Address: 0x18005f450)
IsValidCodePage (Address: 0x18005f148)
IsValidLocale (Address: 0x18005f110)
LCMapStringEx (Address: 0x18005f410)
LCMapStringW (Address: 0x18005f100)
LeaveCriticalSection (Address: 0x18005f3d0)
LoadLibraryExW (Address: 0x18005f4c0)
LoadLibraryW (Address: 0x18005f330)
LocalFree (Address: 0x18005f338)
Module32FirstW (Address: 0x18005f390)
MultiByteToWideChar (Address: 0x18005f408)
OpenProcess (Address: 0x18005f2b8)
OpenThread (Address: 0x18005f298)
OutputDebugStringA (Address: 0x18005f218)
OutputDebugStringW (Address: 0x18005f220)
Process32FirstW (Address: 0x18005f380)
Process32NextW (Address: 0x18005f388)
QueryPerformanceCounter (Address: 0x18005f398)
QueryPerformanceFrequency (Address: 0x18005f3a0)
RaiseException (Address: 0x18005f488)
ReadConsoleW (Address: 0x18005f170)
ReadFile (Address: 0x18005f1e8)
ReadProcessMemory (Address: 0x18005f2f0)
ReleaseSRWLockExclusive (Address: 0x18005f3a8)
RtlCaptureContext (Address: 0x18005f428)
RtlLookupFunctionEntry (Address: 0x18005f430)
RtlVirtualUnwind (Address: 0x18005f438)
SetConsoleCP (Address: 0x18005f360)
SetConsoleMode (Address: 0x18005f358)
SetConsoleOutputCP (Address: 0x18005f368)
SetConsoleTitleA (Address: 0x18005f118)
SetEndOfFile (Address: 0x18005f0d0)
SetEnvironmentVariableW (Address: 0x18005f0a8)
SetFilePointerEx (Address: 0x18005f188)
SetLastError (Address: 0x18005f248)
SetStdHandle (Address: 0x18005f0b8)
SetThreadPriority (Address: 0x18005f2a0)
SetUnhandledExceptionFilter (Address: 0x18005f448)
Sleep (Address: 0x18005f258)
TerminateProcess (Address: 0x18005f278)
TlsAlloc (Address: 0x18005f4a0)
TlsFree (Address: 0x18005f4b8)
TlsGetValue (Address: 0x18005f4a8)
TlsSetValue (Address: 0x18005f4b0)
TryAcquireSRWLockExclusive (Address: 0x18005f3b8)
UnhandledExceptionFilter (Address: 0x18005f440)
VirtualProtect (Address: 0x18005f2d8)
VirtualProtectEx (Address: 0x18005f2e0)
VirtualQueryEx (Address: 0x18005f2e8)
WaitForSingleObject (Address: 0x18005f250)
WakeAllConditionVariable (Address: 0x18005f3f0)
WideCharToMultiByte (Address: 0x18005f3c0)
WriteConsoleW (Address: 0x18005f0d8)
WriteFile (Address: 0x18005f1f0)
WriteProcessMemory (Address: 0x18005f2f8)

ntdll.dll

RtlPcToFileHeader (Address: 0x18005f5f8)
RtlUnwind (Address: 0x18005f5f0)
RtlUnwindEx (Address: 0x18005f5e8)

SHELL32.dll

ShellExecuteA (Address: 0x18005f4e0)

USER32.dll

FindWindowA (Address: 0x18005f4f0)
GetAsyncKeyState (Address: 0x18005f510)
IsIconic (Address: 0x18005f518)
IsWindowVisible (Address: 0x18005f520)
MessageBoxA (Address: 0x18005f4f8)
SetForegroundWindow (Address: 0x18005f528)
ShowWindow (Address: 0x18005f500)
VkKeyScanA (Address: 0x18005f508)

WININET.dll

HttpOpenRequestW (Address: 0x18005f550)
HttpSendRequestA (Address: 0x18005f558)
InternetCloseHandle (Address: 0x18005f540)
InternetConnectW (Address: 0x18005f548)
InternetOpenA (Address: 0x18005f538)
InternetReadFile (Address: 0x18005f560)

WS2_32.dll

accept (Address: 0x18005f5b8)
bind (Address: 0x18005f5b0)
closesocket (Address: 0x18005f5a8)
htonl (Address: 0x18005f598)
htons (Address: 0x18005f590)
ioctlsocket (Address: 0x18005f5a0)
listen (Address: 0x18005f5d8)
recv (Address: 0x18005f580)
select (Address: 0x18005f578)
send (Address: 0x18005f570)
setsockopt (Address: 0x18005f5c0)
socket (Address: 0x18005f588)
WSACleanup (Address: 0x18005f5d0)
WSAStartup (Address: 0x18005f5c8)