SyncInfrastructureps[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SyncInfrastructureps.dll
Size

17KB
MD5

68ac037cd5e4e2befc85c9e8d7f9632b
SHA1

6d76e60b5e61b19c370ebd3e71406fdfc41813da
SHA256

1b1a292a5a7e2dc1e236b301f30630f95adc3a03685bed79b5421f9e633bc184
SHA512

4df9a2792cbad675804f023b4dd21a315d62d207787c07bb8dd17046914a4e2ac94f76b3f02e359904e21ffa1cf065ea46903e8b32170d24b45e8118ae7c6a5e
SSDEEP

192:f1DJAAp6XwpkG1ThzQosToKgKtAy+00ccru1NLsAQ+fmVabg0p4WqG/WxNwDf:9Db9Nh1Kg6Ay+00ccS1NpfHMzWqG/W4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SyncInfrastructureps.dll

Files

SyncInfrastructureps.dll
.dll regsvr32 windows:10 windows x86 arch:x86

91cd08a914ef0f53637cf8893c7cb583

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SyncInfrastructurePS.pdb

Imports

msvcrt

_XcptFilter
_initterm
malloc
free
_amsg_exit
_except_handler4_common
memcmp

kernel32

GetCurrentThreadId
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

combase

CStdStubBuffer_AddRef
ord12
ord7
ord8
CStdStubBuffer_CountRefs
ord9
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
ord3
NdrCStdStubBuffer_Release
ord6
ord2
CStdStubBuffer_DebugServerQueryInterface
ord11
CStdStubBuffer_Invoke
ord4
ord10
ord5

oleaut32

LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal

rpcrt4

NdrOleFree
IUnknown_Release_Proxy
NdrOleAllocate
IUnknown_AddRef_Proxy
NdrDllCanUnloadNow
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
IUnknown_QueryInterface_Proxy

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91cd08a914ef0f53637cf8893c7cb583

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

combase

oleaut32

rpcrt4

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 920B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 976B

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 920B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 976B