Sync[.]dll | Triage™

Resubmissions

15/08/2026, 21:21

260815-z7nxdatenh

15/08/2026, 21:15

260815-z3y7jsgp9t3

Sharing

Copy URL Twitter E-mail

General

Target
Sync.dll
Size 2.3MB
Sample260815-z7nxdatenh
SHA256 23fa051e81d4f7f3f50ed3b9a4a2bff7af8acd6c5107c6a679389c4e92e530f2
MD5 522824f56a9c67853cd786b0017d6609
SHA1 c84ceb8f03f170f24b70efc58868f117bea48660
SHA512 853248f0a929d1f5424d371258c2a1cd746195e9d60eca7c7674aa18bc2010926a355162a4581305ec7d00eb5d9dde7da2b96e0b55f6cdbac5bd69893a8188c3
SSDEEP 49152:tQ78OEHElfcx7QYNq93IH+loMYlnIf8WhjzmpjttYzPwnDDYN9s+VI:M3fct6ivMYVIUttYzPCDDYN9s+VI
TLSH
T1EAB59D83A2D18E9EC8A6D67891E3672FF2783C421727A7C7579006793F937C06E66305
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
Sync.dll

File Explorer

Sync.dll

.dll 2.3MB

Sync.dll

IMPHASH cba47d8a25f77c2300a7e3e1f1df4cfe
SHA256 23fa051e81d4f7f3f50ed3b9a4a2bff7af8acd6c5107c6a679389c4e92e530f2
MD5 522824f56a9c67853cd786b0017d6609
SHA1 c84ceb8f03f170f24b70efc58868f117bea48660
SHA512 853248f0a929d1f5424d371258c2a1cd746195e9d60eca7c7674aa18bc2010926a355162a4581305ec7d00eb5d9dde7da2b96e0b55f6cdbac5bd69893a8188c3
SSDEEP 49152:tQ78OEHElfcx7QYNq93IH+loMYlnIf8WhjzmpjttYzPwnDDYN9s+VI:M3fct6ivMYVIUttYzPCDDYN9s+VI
TLSH
T1EAB59D83A2D18E9EC8A6D67891E3672FF2783C421727A7C7579006793F937C06E66305
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a5:87:8f:81:9c:42:39:2a:aa:8b:9a:d1:da:50:3e:fd:f7:8c:87:3d:2d:3b:db:65:05:1a:14:bb:d3:3c:be:b8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN

Chains

Aug 15, 2026

CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN

Subject

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Serial Number

47:97:4d:78:73:a5:bc:ab:0d:2f:b3:70:19:2f:ce:5e

Issuer

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 8, 2010 - Feb 7, 2020

Subject

CN=福建六壬网安股份有限公司,OU=IT,O=福建六壬网安股份有限公司,L=福州,ST=福建,C=CN

Serial Number

36:ea:f6:1d:c3:95:f6:30:41:f4:24:7d:ae:76:ab:7e

Issuer

CN=Thawte Code Signing CA - G2,O=Thawte\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2016 - Aug 12, 2018

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

4576

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

winmm

timeBeginPeriod timeEndPeriod

d3dcompiler_47

D3DCompile

gdi32

CreateRectRgn DeleteObject GetDeviceCaps GetPixel

dwmapi

DwmEnableBlurBehindWindow DwmGetColorizationColor DwmIsCompositionEnabled

user32

CallNextHookEx CallWindowProcW ClientToScreen ClipCursor CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow EmptyClipboard GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyNameTextA GetKeyState GetKeyboardLayout GetKeyboardState GetMessageExtraInfo GetSystemMetrics IsWindowUnicode LoadCursorA LoadCursorW MapVirtualKeyA MessageBoxA MonitorFromWindow OpenClipboard RegisterClassExW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetProcessDPIAware SetWindowLongPtrW ShowCursor ToUnicode TrackMouseEvent UnregisterClassW

kernel32

CloseHandle CreateFileA CreateFileMappingA CreateThread DeleteCriticalSection DisableThreadLibraryCalls EnterCriticalSection FlushInstructionCache FreeLibrary GetCurrentProcess GetCurrentThread GetExitCodeThread GetFileAttributesA GetFileSizeEx GetLastError GetLocalTime GetLocaleInfoA GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetProcAddress GetProcessHeap GetTickCount GetTickCount64 GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection LeaveCriticalSection LoadLibraryA MapViewOfFile MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFile SetPriorityClass SetThreadPriority Sleep TlsGetValue UnmapViewOfFile VerSetConditionMask VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte __C_specific_handler

libc++

_ZNKSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE5rfindEcy _ZNKSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE4findEwy _ZNKSt3__14__fs10filesystem18directory_iterator13__dereferenceEv _ZNKSt3__14__fs10filesystem4path11__extensionEv _ZNKSt3__14__fs10filesystem4path6__stemEv _ZNKSt3__14__fs10filesystem4path9__compareENS_17basic_string_viewIwNS_11char_traitsIwEEEE _ZNKSt3__16locale9has_facetERNS0_2idE _ZNKSt3__16locale9use_facetERNS0_2idE _ZNKSt3__18ios_base6getlocEv _ZNSt11logic_errorC2EPKc _ZNSt12length_errorD1Ev _ZNSt12out_of_rangeD1Ev _ZNSt20bad_array_new_lengthC1Ev _ZNSt20bad_array_new_lengthD1Ev _ZNSt3__112__next_primeEy _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE21__grow_by_and_replaceEyyyyyyPKc _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6appendEPKcy _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6insertEyPKcy _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE6resizeEyc _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE7reserveEy _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9__grow_byEyyyyyy _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEE9push_backEc _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEC2ERKS5_yyRKS4_ _ZNSt3__112basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEaSERKS5_ _ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEE6resizeEyw _ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEC2ERKS5_yyRKS4_ _ZNSt3__112basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEaSERKS5_ _ZNSt3__113__hash_memoryEPKvy _ZNSt3__113basic_istreamIcNS_11char_traitsIcEEED0Ev _ZNSt3__113basic_istreamIcNS_11char_traitsIcEEED1Ev _ZNSt3__113basic_istreamIcNS_11char_traitsIcEEED2Ev _ZNSt3__113basic_istreamIcNS_11char_traitsIcEEErsERf _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEE5flushEv _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED0Ev _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED1Ev _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEED2Ev _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEd _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEf _ZNSt3__113basic_ostreamIcNS_11char_traitsIcEEElsEi _ZNSt3__115__thread_structC1Ev _ZNSt3__115__thread_structD1Ev _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE4syncEv _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE5imbueERKNS_6localeE _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE5uflowEv _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6setbufEPcx _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6xsgetnEPcx _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE6xsputnEPKcx _ZNSt3__115basic_streambufIcNS_11char_traitsIcEEE9showmanycEv _ZNSt3__116__libcpp_tls_setElPv _ZNSt3__119__shared_weak_count14__release_weakEv _ZNSt3__119__thread_local_dataEv _ZNSt3__120__throw_system_errorEiPKc _ZNSt3__122__libcpp_thread_createEPPvPFS0_S0_ES0_ _ZNSt3__14__fs10filesystem14__char_to_wideERKNS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPwy _ZNSt3__14__fs10filesystem14__wide_to_charERKNS_12basic_stringIwNS_11char_traitsIwEENS_9allocatorIwEEEEPcy _ZNSt3__14__fs10filesystem18directory_iterator11__incrementEPNS_10error_codeE _ZNSt3__14__fs10filesystem18directory_iteratorC2ERKNS1_4pathEPNS_10error_codeENS1_17directory_optionsE _ZNSt3__14__fs10filesystem20__create_directoriesERKNS1_4pathEPNS_10error_codeE _ZNSt3__14__fs10filesystem8__removeERKNS1_4pathEPNS_10error_codeE _ZNSt3__14__fs10filesystem8__statusERKNS1_4pathEPNS_10error_codeE _ZNSt3__14stodERKNS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPy _ZNSt3__14stofERKNS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPy _ZNSt3__14stoiERKNS_12basic_stringIcNS_11char_traitsIcEENS_9allocatorIcEEEEPyi _ZNSt3__15ctypeIcE2idE _ZNSt3__15ctypeIwE2idE _ZNSt3__16chrono12steady_clock3nowEv _ZNSt3__16localeC1ERKS0_ _ZNSt3__16localeC1Ev _ZNSt3__16localeD1Ev _ZNSt3__16thread6detachEv _ZNSt3__16threadD1Ev _ZNSt3__17codecvtIcc9_MbstatetE2idE _ZNSt3__18ios_base33__set_badbit_and_consider_rethrowEv _ZNSt3__18ios_base4initEPv _ZNSt3__18ios_base5clearEj _ZNSt3__19basic_iosIcNS_11char_traitsIcEEED2Ev _ZNSt3__19to_stringEf _ZNSt3__19to_stringEi _ZNSt3__1plIcNS_11char_traitsIcEENS_9allocatorIcEEEENS_12basic_stringIT_T0_T1_EEPKS6_RKS9_ _ZNSt8bad_castC1Ev _ZNSt8bad_castD1Ev _ZSt19uncaught_exceptionsv _ZSt9terminatev _ZTVN10__cxxabiv117__class_type_infoE _ZTVN10__cxxabiv120__si_class_type_infoE _ZTVN10__cxxabiv121__vmi_class_type_infoE _ZTVNSt3__115basic_streambufIcNS_11char_traitsIcEEEE _ZTVSt12length_error _ZTVSt12out_of_range _ZTv0_n24_NSt3__113basic_istreamIcNS_11char_traitsIcEEED0Ev _ZTv0_n24_NSt3__113basic_istreamIcNS_11char_traitsIcEEED1Ev _ZTv0_n24_NSt3__113basic_ostreamIcNS_11char_traitsIcEEED0Ev _ZTv0_n24_NSt3__113basic_ostreamIcNS_11char_traitsIcEEED1Ev _ZdaPv _ZdlPv _Znay _Znwy __cxa_allocate_exception __cxa_begin_catch __cxa_end_catch __cxa_free_exception __cxa_rethrow __cxa_throw __gxx_personality_seh0

libunwind

_Unwind_Resume

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vsscanf __stdio_common_vswprintf_s _fseeki64 _ftelli64 fclose fflush fopen fread fseek ftell fwrite setbuf

api-ms-win-crt-string-l1-1-0

iswprint memset strcmp strcpy_s strlen strncat_s strncmp strncpy strncpy_s tolower toupper wcslen

api-ms-win-crt-convert-l1-1-0

atof atoi mbstowcs mbstowcs_s strtol

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _exit _initialize_onexit_table _initterm _initterm_e _register_onexit_function abort

api-ms-win-crt-math-l1-1-0

acos acosf atan atan2 atan2f ceilf cos cosf expf fmod fmodf log logf pow powf roundf sin sinf sqrtf

api-ms-win-crt-heap-l1-1-0

calloc free malloc

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmp longjmp memchr memcmp memcpy memmove strchr strrchr strstr

api-ms-win-crt-utility-l1-1-0

qsort rand srand

api-ms-win-crt-environment-l1-1-0

getenv

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

331KB

Virtual Size

331KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

161KB

Virtual Size

238KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/18

Size

512B

Virtual Size

48B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/58

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/82

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/33

Size

1024B

Virtual Size

656B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/47

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Sync.dll

PE Signature issue

d3d11

winmm

d3dcompiler_47

gdi32

dwmapi

user32

kernel32

libc++

libunwind

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

generic