syncreg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Syncreg.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
Syncreg.dll
Resource
win10v2004-20240508-en
General
-
Target
Syncreg.dll
-
Size
57KB
-
MD5
e5cbb71f24bf9d385c455c59ad0346ee
-
SHA1
07f75a39cfdabafd93346788a9b49a43e0a49746
-
SHA256
9729479c9a3c5005a8ca5e3e3c8aee265efb46f8e13b02d428b326643ccb6556
-
SHA512
129cece2e148564f6b42209f329d66720e1c99c78e966f18a0f07b4ea49e0f8154f4a5aa38db4244ce50c34c0b69c1fe059229ce721086f1db1b51ba4d081cd1
-
SSDEEP
1536:QdP1XgrDJcLy7pPRr0i8aapVymR7N2YAXF4jbjU0By4n0c:QdP1XDLy7pV0tlLxAXF4j8oy4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Syncreg.dll
Files
-
Syncreg.dll.dll regsvr32 windows:6 windows x86 arch:x86
b83f3f54c1e51d3216c7aff342800d8b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memcmp
_ftol2
_vsnwprintf
_except_handler4_common
_initterm
malloc
free
_amsg_exit
_XcptFilter
memset
propsys
PSCreateMemoryPropertyStore
InitPropVariantFromCLSID
ole32
CoTaskMemFree
IIDFromString
CoCreateGuid
StringFromGUID2
CoCreateFreeThreadedMarshaler
CoCreateInstance
oleaut32
SetErrorInfo
CreateErrorInfo
GetErrorInfo
kernel32
GetUserDefaultUILanguage
FindClose
GetModuleFileNameW
lstrlenW
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapDestroy
HeapAlloc
HeapFree
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetLastError
LeaveCriticalSection
CloseHandle
GetLastError
CreateEventW
ResetEvent
WaitForSingleObject
FormatMessageW
GetFullPathNameW
FindFirstFileW
LCIDToLocaleName
FreeLibrary
LoadLibraryW
EnterCriticalSection
advapi32
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegGetValueW
RegSetValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenCurrentUser
RegNotifyChangeKeyValue
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
TraceMessage
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
UnregisterTraceGuids
RegisterTraceGuidsW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 924B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ