BitsProxy[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

BitsProxy.dll
Size

41KB
MD5

19005675e5ea3a6c9266ed6a0900f47a
SHA1

42f1e5a17c773485eb1b321485421c207ba951ba
SHA256

b4e3017d677cf7e52fb6db97ebf8f6bfd635109ac4bfb58d04c06e6ab325793a
SHA512

bc25a0a23555607340388e2bfe4aa64cb48443864c1ad59fea6fb86c892642dc673fa8410b21b098eb5a2ef0a914b03f3e6ef2ffa29e437fb1b30d2d08cc8a73
SSDEEP

384:/QYmrE8M+P8pPo+aYouT2aHXUz1NmPvUkOvKPOW89/7WUqEmEM3A7BFH:/QY1E8xo+a+kv2OyP6gEmEMwd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
BitsProxy.dll

Files

BitsProxy.dll
.dll regsvr32 windows:10 windows x86 arch:x86

cb6018fbad3863d1d5a123d20ce758b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

BitsProxy.pdb

Imports

msvcrt

??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
_XcptFilter
??1exception@@UAE@XZ
_amsg_exit
vsprintf_s
free
malloc
_initterm
??1type_info@@UAE@XZ
_except_handler4_common
_CxxThrowException
__CxxFrameHandler3
memcmp

combase

NdrCStdStubBuffer_Release
CStdStubBuffer_QueryInterface
CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_Invoke
NdrCStdStubBuffer2_Release
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerRelease

rpcrt4

NdrDllUnregisterProxy
NdrClientCall2
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrStubCall2
NdrStubForwardingFunction
IUnknown_QueryInterface_Proxy
NdrOleAllocate
IUnknown_Release_Proxy
NdrOleFree
IUnknown_AddRef_Proxy

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-heap-l1-2-0

GetProcessHeap
HeapFree

api-ms-win-core-com-l1-1-1

CLSIDFromString
CoCreateInstance

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-2

TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-sysinfo-l1-2-1

GetTickCount
GetSystemTimeAsFileTime

api-ms-win-core-errorhandling-l1-1-1

UnhandledExceptionFilter
SetUnhandledExceptionFilter

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI
DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb6018fbad3863d1d5a123d20ce758b7

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

combase

rpcrt4

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-heap-l1-2-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-2

api-ms-win-core-sysinfo-l1-2-1

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-delayload-l1-1-1

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 28KB

.data Size: 3KB - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.didat Size: 512B - Virtual size: 36B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 29KB - Virtual size: 28KB

.data
Size: 3KB - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.didat
Size: 512B - Virtual size: 36B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 3KB