SyncInfrastructureps[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

SyncInfrastructureps.dll
Size

17KB
MD5

e24e673829ad4cbecf5d58cb9ccf3e2a
SHA1

b749813526917d2b5f18dac74cb31c6fc868d5b2
SHA256

c7b2a3eaba14d283783102584297609e0281f358ee0323e8b54161d77245b09f
SHA512

1932b08560b7efd84db872f107054cc32efd0128e7c90255ea6ee99cc841ed41a6b1e5f1a033d23db51a49c59784ad272a880b8c652ae26fd250c1e5c923c2f1
SSDEEP

384:xHnF9NhWKc3qv66zQtpD/41IdSI90WqgTWVx:5FfccCR/Dd99V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SyncInfrastructureps.dll

Files

SyncInfrastructureps.dll
.dll regsvr32 windows:10 windows x86 arch:x86

d1d9fe95b3e1ae73a60a31c31e0d6372

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SyncInfrastructurePS.pdb

Imports

msvcrt

_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter
memcmp

kernel32

GetCurrentThreadId
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
Sleep
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
DisableThreadLibraryCalls

combase

CStdStubBuffer_AddRef
ord5
ord7
ord8
CStdStubBuffer_CountRefs
ord9
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
ord3
NdrCStdStubBuffer_Release
ord4
ord12
ord6
ord2
ord10
ord11
CStdStubBuffer_Invoke
CStdStubBuffer_DebugServerQueryInterface

oleaut32

BSTR_UserUnmarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserSize
BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize

rpcrt4

NdrOleFree
IUnknown_Release_Proxy
NdrOleAllocate
IUnknown_QueryInterface_Proxy
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
IUnknown_AddRef_Proxy

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d1d9fe95b3e1ae73a60a31c31e0d6372

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

kernel32

combase

oleaut32

rpcrt4

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 920B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 996B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 920B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 996B