ServiceMain
SvchostPushServiceGlobals
Behavioral task
behavioral1
Sample
6dc495b9347b1e83499a07826de86db91c3d1e6917e4ca7003fd9d9097842079.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
6dc495b9347b1e83499a07826de86db91c3d1e6917e4ca7003fd9d9097842079.exe
Resource
win10-en-20211208
Target
6dc495b9347b1e83499a07826de86db91c3d1e6917e4ca7003fd9d9097842079
Size
242KB
MD5
291243f46be2d939f83594e0d3c62c6f
SHA1
4dff20e4a24d161e288bd8692c668d3cf0b057ee
SHA256
6dc495b9347b1e83499a07826de86db91c3d1e6917e4ca7003fd9d9097842079
SHA512
15b1d2eafb5bb36758ab7c48b17658893a827613801e3a6e61b92a444c42f0c4fa5269c5bfbeabd410eea0951975aac14e74827e31eee3df0f12c40113b6adb3
SSDEEP
1536:qi6eLxodT76zw6OwZwhdzGnk4rFv0XWbC5R5T4JZ3ttttttttttttttyWcx+v+a:tvmtLwZwTKkyFv85R5T4JZm3+v+a
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetTickCount
GetComputerNameExW
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
CloseHandle
SetEvent
WaitForSingleObject
CreateEventW
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
CreateFileA
DeleteFileA
WriteFile
GetTempPathA
GetTempFileNameA
TerminateThread
GetSystemWindowsDirectoryA
GetShortPathNameA
MultiByteToWideChar
SetFilePointer
GetProcessHeap
GetLastError
ReleaseMutex
CreateDirectoryA
HeapFree
HeapAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
RaiseException
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
WaitForSingleObjectEx
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
VirtualQuery
RegisterServiceCtrlHandlerW
SetServiceStatus
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
ioctlsocket
htons
inet_addr
setsockopt
shutdown
socket
WSAStartup
WSACleanup
WSAGetLastError
WSAPoll
closesocket
connect
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpReadData
WinHttpSetOption
RpcStringFreeA
UuidToStringA
UuidCreate
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
__CxxFrameHandler3
memcmp
memcpy
memmove
memset
strchr
strrchr
wcschr
_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__vcrt_GetModuleFileNameW
__std_type_info_destroy_list
__C_specific_handler_noexcept
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
terminate
_seh_filter_exe
_set_app_type
__setusermatherr
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_set_fmode
_initialize_narrow_environment
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
strcpy_s
_wmakepath_s
_wsplitpath_s
wcscpy_s
_configure_narrow_argv
srand
strlen
strcat_s
_errno
rand
_seh_filter_dll
malloc
_callnewh
_CrtDbgReportW
__stdio_common_vswprintf_s
_wtol
_wcsnicmp
wcslen
wcscmp
_beginthreadex
__p___argc
_ltoa_s
__stdio_common_vsprintf_s
_CrtDbgReport
_invalid_parameter_noinfo
_invalid_parameter
_initialize_onexit_table
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ