SyncHostps[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

SyncHostps.dll
Size

11KB
MD5

03bf6fd9baf0ebb7d325f42d5b563e46
SHA1

b63aad89787d662783262282be2a382dcc636539
SHA256

0cf71532441dd1aa5b539272bb5dbf475aa75dc0fe7a8f113f3bfcc29acf6dc2
SHA512

3b315e825b2f17b7d11f257c7567b1a06562c2e65d033e738fc262cd7d4031975076ed5bd6d2244c0d807a6ec9c7d9854dddd5d53deaa34e692949117b390cf7
SSDEEP

192:B/Cg2YITafC6zwVsTwMA92O6qpu/S1f1W+TWhTA:B/2afC6zwVWw12Oe/S3W+TWW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SyncHostps.dll

Files

SyncHostps.dll
.dll regsvr32 windows:10 windows x86 arch:x86

e7609f87d5c5b7772905b736be8e9f01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SyncHostPS.pdb

Imports

msvcrt

_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter
memcmp

combase

CStdStubBuffer_Connect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
NdrCStdStubBuffer_Release
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
ord2
CStdStubBuffer_DebugServerQueryInterface
ord3
CStdStubBuffer_Invoke
CStdStubBuffer_QueryInterface

rpcrt4

NdrOleAllocate
IUnknown_Release_Proxy
NdrOleFree
IUnknown_AddRef_Proxy
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
IUnknown_QueryInterface_Proxy

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
DisableThreadLibraryCalls

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 560B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e7609f87d5c5b7772905b736be8e9f01

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

combase

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 864B

.idata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 1024B - Virtual size: 560B

We care about your privacy.

.text
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 864B

.idata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 1024B - Virtual size: 560B