ComplianceExtensions[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

ComplianceExtensions.dll
Size

182KB
MD5

1daf2531389d845773123f5d3d670cac
SHA1

0801c33d936f9dd8791fa29bd6321691bac012ec
SHA256

d7dd9f78eb4a45eb569ec37bf585e37df64d92976b0e3077af8fe9affe6e6445
SHA512

4875e2de26bf6e61a959f78ca7146d260155dfb49996d22a98dccffa71e8f842969801ee0517eccb25fc3b1ca63fdb61fa1e1dd9fa106b246f67ecebb684b39e
SSDEEP

3072:e0MjFNmKLDMpgqX6AJwmapXbd3vGI9rJs2qeEO6NF:HMmQMpgV6wmapLd3vGIPX6N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ComplianceExtensions.dll

Files

ComplianceExtensions.dll
.dll regsvr32 windows:6 windows x64 arch:x64

3482f55dc55e267247a31f9d217fa392

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ComplianceExtensions.pdb

Imports

msvcrt

_lock
?terminate@@YAXXZ
_initterm
_amsg_exit
_XcptFilter
__CxxFrameHandler3
_CxxThrowException
_callnewh
_unlock
__C_specific_handler
memset
_itow_s
_snwprintf_s
_wcsicmp
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@XZ
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
_ultow
_wtoi
memmove_s
wcscpy_s
wcscat_s
memcpy_s
_purecall
malloc
free
__dllonexit
_onexit
_errno
realloc
??1type_info@@UEAA@XZ
wcsncpy_s
memcmp

ole32

CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc
CoCreateInstance
CoTaskMemAlloc

advapi32

ConvertSecurityDescriptorToStringSecurityDescriptorW
OpenSCManagerW
CloseServiceHandle
TraceMessage
RegSetValueExW
RegisterTraceGuidsW
RegCloseKey
RegEnumKeyExW
GetTraceEnableLevel
RegOpenKeyExW
UnregisterTraceGuids
RegDeleteValueW
GetTraceLoggerHandle
RegQueryInfoKeyW
GetTraceEnableFlags
RegCreateKeyExW
EventRegister
EventUnregister
EventEnabled
EventWrite
OpenServiceW

oleaut32

VariantClear
SysStringByteLen
SysAllocStringLen
VarBstrCat
SysAllocStringByteLen
LoadRegTypeLi
SysFreeString
RegisterTypeLi
VarUI4FromStr
UnRegisterTypeLi
LoadTypeLi
SysStringLen
SysAllocString

user32

UnregisterClassA
CharNextW

kernel32

FormatMessageW
LocalFree
GetWindowsDirectoryW
CloseHandle
ReleaseMutex
LockResource
LoadLibraryW
WriteFile
WaitForSingleObject
FindResourceW
CreateMutexW
DeleteCriticalSection
lstrcmpiW
DisableThreadLibraryCalls
LoadResource
GetProcAddress
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringA
CreateFileW
EnterCriticalSection
FreeLibrary
FindResourceExW
LoadLibraryExW
GetModuleHandleW
InitializeCriticalSection
SizeofResource
LeaveCriticalSection
GetModuleFileNameW
MultiByteToWideChar
RaiseException
GetLastError

scecli

SceGetObjectSecurity
SceAnalyzeSystem
SceOpenProfile
SceGetSecurityProfileInfo
SceFreeMemory
SceFreeProfileMemory
SceCloseProfile
SceGetObjectChildren
SceConfigureSystem

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3482f55dc55e267247a31f9d217fa392

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

ole32

advapi32

oleaut32

user32

kernel32

scecli

Exports

Exports

Sections

.text Size: 131KB - Virtual size: 131KB

.data Size: 3KB - Virtual size: 5KB

.pdata Size: 4KB - Virtual size: 4KB

.idata Size: 4KB - Virtual size: 4KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 131KB - Virtual size: 131KB

.data
Size: 3KB - Virtual size: 5KB

.pdata
Size: 4KB - Virtual size: 4KB

.idata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 1KB - Virtual size: 1KB