actxprxy[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

actxprxy.dll
Size

279KB
MD5

e7019642e60d1d9dd16c607a30733259
SHA1

aba92ee7ef6e1180802331f0fee532386867d683
SHA256

50d05cf2a729e5676e492e92288aeee6a65641b1a47f93317a549415dc9d18da
SHA512

a74fe6f2f038dc056e691980779a606018825d0960a13436fa3751f0bc29f5543931d3d7965a2aa54254829e9d875bb5e96f73441f7910be600d0e0b8769ce68
SSDEEP

3072:Ee8AdZ7iep9ZVJhZVxF6fhN7MuadPu3gG4zeqrT9mxDwd1KMPlEybD:ENfj7gG/gFn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
actxprxy.dll

Files

actxprxy.dll
.dll regsvr32 windows:10 windows x86 arch:x86

666252afad3d07fb7f2f7534f9775e09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ActXPrxy.pdb

Imports

msvcrt

_initterm
malloc
free
_except_handler4_common
_XcptFilter
_amsg_exit
memcmp
memcpy

rpcrt4

CStdStubBuffer_IsIIDSupported
NdrStubForwardingFunction
NdrClientCall4
NdrGetUserMarshalInfo
RpcRaiseException
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
NdrStubCall2
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
NdrCStdStubBuffer2_Release
CStdStubBuffer_Connect
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_AddRef

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-com-midlproxystub-l1-1-0

NdrProxyForwardingFunction7
ObjectStublessClient24
ObjectStublessClient25
NdrProxyForwardingFunction23
NdrProxyForwardingFunction12
ObjectStublessClient30
ObjectStublessClient21
NdrProxyForwardingFunction29
NdrProxyForwardingFunction25
ObjectStublessClient17
ObjectStublessClient26
NdrProxyForwardingFunction10
CStdAsyncStubBuffer_QueryInterface
NdrProxyForwardingFunction30
ObjectStublessClient29
NdrProxyForwardingFunction9
NdrProxyForwardingFunction13
ObjectStublessClient19
CStdAsyncStubBuffer_Invoke
CStdAsyncStubBuffer_AddRef
NdrProxyForwardingFunction31
ObjectStublessClient3
CStdAsyncStubBuffer_Connect
NdrProxyForwardingFunction11
NdrProxyForwardingFunction6
NdrProxyForwardingFunction19
ObjectStublessClient4
NdrProxyForwardingFunction21
ObjectStublessClient16
CStdStubBuffer2_CountRefs
CStdStubBuffer2_Disconnect
ObjectStublessClient7
CStdStubBuffer2_QueryInterface
NdrProxyForwardingFunction4
NdrProxyForwardingFunction5
ObjectStublessClient6
ObjectStublessClient8
ObjectStublessClient9
NdrProxyForwardingFunction3
CStdStubBuffer2_Connect
ObjectStublessClient5
ObjectStublessClient12
ObjectStublessClient14
ObjectStublessClient11
ObjectStublessClient15
ObjectStublessClient13
ObjectStublessClient10
ObjectStublessClient23
CStdAsyncStubBuffer_Release
NdrProxyForwardingFunction27
NdrProxyForwardingFunction26
NdrProxyForwardingFunction16
NdrProxyForwardingFunction24
NdrProxyForwardingFunction18
CStdAsyncStubBuffer_Disconnect
NdrProxyForwardingFunction22
NdrProxyForwardingFunction17
NdrProxyForwardingFunction14
ObjectStublessClient31
NdrProxyForwardingFunction15
NdrProxyForwardingFunction20
ObjectStublessClient20
ObjectStublessClient28
NdrProxyForwardingFunction28
NdrProxyForwardingFunction8
ObjectStublessClient22
ObjectStublessClient27
ObjectStublessClient18

api-ms-win-core-marshal-l1-1-0

HICON_UserFree
HWND_UserFree
HBITMAP_UserMarshal
HWND_UserSize
HWND_UserMarshal
HMENU_UserSize
HICON_UserSize
HMONITOR_UserUnmarshal
HWND_UserUnmarshal
HMENU_UserMarshal
HMENU_UserFree
HICON_UserUnmarshal
HMONITOR_UserSize
HMONITOR_UserMarshal
HMENU_UserUnmarshal
HICON_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HMONITOR_UserFree
HBITMAP_UserFree

api-ms-win-core-com-l1-1-0

CoTaskMemFree
CoTaskMemRealloc

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

666252afad3d07fb7f2f7534f9775e09

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

rpcrt4

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-com-midlproxystub-l1-1-0

api-ms-win-core-marshal-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-delayload-l1-1-1

api-ms-win-core-delayload-l1-1-0

Exports

Exports

Sections

.text Size: 233KB - Virtual size: 232KB

.data Size: 1024B - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 5KB

.didat Size: 512B - Virtual size: 72B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 233KB - Virtual size: 232KB

.data
Size: 1024B - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 5KB

.didat
Size: 512B - Virtual size: 72B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 36KB - Virtual size: 36KB