WinSyncProviders[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

WinSyncProviders.dll
Size

114KB
MD5

6776beb73c5a6bfafa9405ab7f30b53b
SHA1

3dc3d8fdd00a7b5bc0aa17c71b310bf105a027ca
SHA256

dccd7fe5b56ec1de52ed5e01f03abf2fcd133fb8b1531871984286e83d920cfa
SHA512

77d541327847ed5dcafe165be0116448c818828645b70ac3502b11072f094080e76798a43a9818645caa1408d5ee28da709eb8ddd596343fd5b03804e03da02e
SSDEEP

3072:bebYiPA/qMFePyuoGQFtEpPAIIckwJw0si:bebYDCYtuoGQFtGpX6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WinSyncProviders.dll

Files

WinSyncProviders.dll
.dll regsvr32 windows:6 windows x86 arch:x86

8bcb7c1649aaca5f78fcede3c34c6001

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

WinSyncProviders.pdb

Imports

msvcrt

_purecall
_except_handler4_common
_ftol2
memcpy
_amsg_exit
_initterm
free
malloc
_XcptFilter
??2@YAPAXI@Z
_vsnwprintf
??3@YAXPAX@Z
memset
memcpy_s

winsync

ord1

ole32

StringFromGUID2
CoCreateGuid

oleaut32

CreateErrorInfo
GetErrorInfo
SetErrorInfo

kernel32

GetUserDefaultUILanguage
LCIDToLocaleName
GetFullPathNameW
SetLastError
FindFirstFileW
FindClose
FreeLibrary
LoadLibraryW
GetSystemTime
SystemTimeToFileTime
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetModuleFileNameW
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
CompareStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FormatMessageW
GetLastError
GetCurrentProcess

user32

LoadStringW

advapi32

RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegCloseKey
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8bcb7c1649aaca5f78fcede3c34c6001

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

winsync

ole32

oleaut32

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 106KB - Virtual size: 105KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 106KB - Virtual size: 105KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB