IA2ComProxy[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

IA2ComProxy.dll
Size

26KB
MD5

8f725d3b249378a00eb9e8f3f526b223
SHA1

cb8d4281e7c81ed8952fcf12df1f01d044c909c3
SHA256

f0f537e92dc1537179d533990bd79b4416eeadd033d850fd2f387d8d9143ab0d
SHA512

b8273eff49941da7aebbaa3dfe9af00f8c71dd8bb70beebf921744a706e4a3ea63d15835989b1b2837227375b5a4e817960b1503c0cb7ea387625e664c2633ee
SSDEEP

384:vd1Q8ZV8kP6nPKSBUZZkgmNZ+q9ZrOLhQdrtEZFWwWWIQ:vd1QUVxChBO/mVFchCmZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IA2ComProxy.dll

Files

IA2ComProxy.dll
.dll regsvr32 windows:10 windows x86 arch:x86

e31994cb8ab8b0cc78379779798c9a64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

IA2ComProxy.pdb

Imports

msvcrt

malloc
_initterm
free
_except_handler4_common
_amsg_exit
_XcptFilter
memcmp

oleaut32

VARIANT_UserUnmarshal
VARIANT_UserSize
BSTR_UserUnmarshal
VARIANT_UserMarshal
BSTR_UserMarshal
BSTR_UserFree
VARIANT_UserFree
BSTR_UserSize

rpcrt4

IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
NdrDllUnregisterProxy
CStdStubBuffer_Invoke
NdrStubForwardingFunction
NdrStubCall2
NdrDllRegisterProxy
NdrOleAllocate
CStdStubBuffer_QueryInterface
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerQueryInterface
NdrCStdStubBuffer2_Release
IUnknown_Release_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_IsIIDSupported
NdrOleFree
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Connect

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient20
CStdStubBuffer2_Disconnect
ObjectStublessClient7
ObjectStublessClient13
ObjectStublessClient5
ObjectStublessClient28
CStdStubBuffer2_QueryInterface
ObjectStublessClient19
ObjectStublessClient18
ObjectStublessClient27
ObjectStublessClient3
ObjectStublessClient22
ObjectStublessClient6
CStdStubBuffer2_CountRefs
ObjectStublessClient23
ObjectStublessClient9
ObjectStublessClient11
ObjectStublessClient26
ObjectStublessClient24
ObjectStublessClient17
ObjectStublessClient10
ObjectStublessClient14
ObjectStublessClient31
ObjectStublessClient12
ObjectStublessClient30
ObjectStublessClient16
ObjectStublessClient29
ObjectStublessClient4
ObjectStublessClient21
ObjectStublessClient25
ObjectStublessClient8
CStdStubBuffer2_Connect
ObjectStublessClient15

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-marshal-l1-1-0

HWND_UserSize
HWND_UserFree
HWND_UserUnmarshal
HWND_UserMarshal

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e31994cb8ab8b0cc78379779798c9a64

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

oleaut32

rpcrt4

api-ms-win-core-com-midlproxystub-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-marshal-l1-1-0

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB