SyncCenter[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

SyncCenter.dll
Size

3.1MB
MD5

c239e54067419b6cc7024114b9d9f834
SHA1

b20b806811505d3036a28a402199d05eaacb2ea6
SHA256

47902ebd21e3b719fdcb46e22e6919df4ce1f47c7ccaf20be978fb804b302901
SHA512

0f82cc3cc23e2a2689ec7698a1b069edd0df191defff02e209d13ad19fca762186f8bdae5e3503e560e6da7e2c1d4da151b41c13842cefa12d16332de2e85bee
SSDEEP

49152:3SzpKL6vH1U9KpfwhPNyUVC5XwSUFipnw:3L6+9Kqhl3VCSXFiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SyncCenter.dll

Files

SyncCenter.dll
.dll windows:10 windows x86 arch:x86

485c13314439bca5c84da69d7dd2846d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SyncCenter.pdb

Imports

msvcrt

_vsnwprintf
__CxxFrameHandler3
wcstol
wcschr
memcpy
memcmp
memmove
_except_handler4_common
_onexit
__dllonexit
_unlock
_lock
_initterm
malloc
free
_amsg_exit
_XcptFilter
memcpy_s
??1type_info@@UAE@XZ
wcstoul
memset

shell32

ord153
SHChangeNotify
ord155
SHGetKnownFolderIDList
ShellExecuteExW
ord704
Shell_NotifyIconW
SHGetDesktopFolder
ord747
ord25
ord19
ord147
SHBindToFolderIDListParentEx
SHBindToParent
SHParseDisplayName
ord256
SHCreateDefaultContextMenu
ord83
ord264
AssocGetDetailsOfPropKey
ord702
SHBindToObject
SHGetFileInfoW
ord152
ord21
ord18
SHCreateItemFromIDList
Shell_GetCachedImageIndexW
SHGetIDListFromObject
SHCreateItemWithParent
ord6
SHCreateDefaultExtractIcon
ord716
AssocCreateForClasses
ord744
ord24
ord866
SHCreateShellItemArrayFromDataObject

shlwapi

ord219
ord615
ord16
ord437
ord24
ord278
StrChrW
SHDeleteKeyW
SHSetValueW
SHRegGetValueW
ord217
ord215
StrCmpW
AssocCreate
ord388
ord611
ord158
ord199
ord619
ord476
StrRetToBufW
SHStrDupW
ord157
ord10
ord9
ord8
ord7
StrCmpNW
ord213
ord12
StrToIntExW
StrStrW
StrTrimW
ord172
ord354
ord176
PathAddBackslashW
ord174
ord363
ord256
ord344
StrPBrkW

api-ms-win-core-libraryloader-l1-2-0

FindResourceExW
LoadStringA
GetModuleFileNameA
DisableThreadLibraryCalls
GetModuleFileNameW
GetModuleHandleW
LockResource
LoadStringW
LoadResource
SizeofResource
LoadLibraryExW
GetModuleHandleExW
GetProcAddress

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW
CreateMutexExW
EnterCriticalSection
WaitForSingleObjectEx
ReleaseMutex
WaitForSingleObject
InitializeCriticalSection
DeleteCriticalSection
CreateMutexW
OpenMutexW
CreateEventW
SetEvent
CreateWaitableTimerExW
SetWaitableTimer
ResetEvent
ReleaseSemaphore
LeaveCriticalSection
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc
HeapFree

api-ms-win-core-errorhandling-l1-1-0

GetLastError
UnhandledExceptionFilter
SetLastError
SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId
TerminateProcess
OpenThread
OpenThreadToken
GetCurrentProcess
OpenProcessToken
GetCurrentThread
CreateThread
GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW
FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
OutputDebugStringW
IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-com-l1-1-0

PropVariantClear
CoUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
StringFromGUID2
CoWaitForMultipleHandles
CoTaskMemAlloc
CoGetMalloc
CoRevokeClassObject
CoResumeClassObjects
CoRegisterClassObject
CoReleaseServerProcess
CoAddRefServerProcess
CoTaskMemFree
CoCreateGuid
PropVariantCopy

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetLocalTime
GetTickCount

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects
CreateWaitableTimerW

api-ms-win-core-synch-l1-2-0

Sleep
WakeAllConditionVariable
SleepConditionVariableSRW

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegQueryInfoKeyW
RegNotifyChangeKeyValue
RegEnumValueW

api-ms-win-core-heap-l2-1-0

GlobalFree
LocalAlloc
LocalFree
LocalReAlloc
GlobalAlloc

api-ms-win-core-file-l1-1-0

LocalFileTimeToFileTime
CompareFileTime

api-ms-win-core-timezone-l1-1-0

SystemTimeToTzSpecificLocalTime
TzSpecificLocalTimeToSystemTime
GetTimeZoneInformationForYear
SystemTimeToFileTime
FileTimeToSystemTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-string-l1-1-0

CompareStringOrdinal
WideCharToMultiByte
CompareStringW

api-ms-win-core-path-l1-1-0

PathCchAddBackslash

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalUnlock
GlobalSize

api-ms-win-core-sidebyside-l1-1-0

CreateActCtxW
DeactivateActCtx
ReleaseActCtx
ActivateActCtx

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpW
lstrlenW
lstrcmpiW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

ntdll

EtwGetTraceLoggerHandle
EtwGetTraceEnableLevel
EtwGetTraceEnableFlags
EtwEventWriteTransfer
EtwEventUnregister
EtwEventRegister
EtwUnregisterTraceGuids
EtwRegisterTraceGuidsW

kernel32

SetWaitableTimerEx
WaitForMultipleObjectsEx

ole32

ReleaseStgMedium
CreateBindCtx
CoAllowSetForegroundWindow

user32

DialogBoxParamW
SetDlgItemTextW
GetDlgItem
DestroyIcon
UnregisterClassW
PostThreadMessageW
EnableWindow
CopyIcon
PostMessageW
GetSystemMetrics
IsWindow
DestroyWindow
DefWindowProcW
ShowWindow
SetWindowTextW
GetWindowTextLengthW
GetWindowTextW
GetParent
GetClientRect
EndDialog
FindWindowExW
SendMessageW
GetWindowThreadProcessId
SetTimer
GetMenuItemCount
EnableMenuItem
SetMenuItemInfoW
GetMenuItemInfoW
SendDlgItemMessageW
FindWindowW
RegisterClassExW
CreateWindowExW
GetMessageW
DestroyMenu
TrackPopupMenu
SwitchToThisWindow
GetLastActivePopup
RegisterClipboardFormatW
SetForegroundWindow
TranslateMessage
DispatchMessageW
GetSubMenu
DeleteMenu
SetMenuDefaultItem
GetWindowRect
GetClassNameW
GetWindow
RegisterClassW
GetWindowLongW
SetWindowLongW
KillTimer
PostQuitMessage
GetCursorPos
LoadMenuW
LoadCursorW

gdi32

CreateFontIndirectW
GetObjectW
GetStockObject
DeleteObject

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 326KB - Virtual size: 326KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

485c13314439bca5c84da69d7dd2846d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

shell32

shlwapi

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-string-l2-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-sidebyside-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-localization-obsolete-l1-2-0

ntdll

kernel32

ole32

user32

gdi32

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

api-ms-win-core-registry-l1-1-1

Exports

Exports

Sections

.text Size: 326KB - Virtual size: 326KB

.data Size: 7KB - Virtual size: 8KB

.idata Size: 9KB - Virtual size: 9KB

.didat Size: 512B - Virtual size: 168B

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 326KB - Virtual size: 326KB

.data
Size: 7KB - Virtual size: 8KB

.idata
Size: 9KB - Virtual size: 9KB

.didat
Size: 512B - Virtual size: 168B

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 25KB - Virtual size: 24KB