ServiceMain
SvchostPushServiceGlobals
Behavioral task
behavioral1
Sample
fa4f6b5212168af58a40adbb2bd8df08f55bfb2f76d8f7858105457e7384276c.dll
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
fa4f6b5212168af58a40adbb2bd8df08f55bfb2f76d8f7858105457e7384276c.dll
Resource
win10v2004-en-20220113
Target
fa4f6b5212168af58a40adbb2bd8df08f55bfb2f76d8f7858105457e7384276c
Size
136KB
MD5
0079a697b8acbb0aa35f9f662f38debe
SHA1
e2b64333e4d4d9bf3eed1a7b5bf701eb6e4ad77e
SHA256
fa4f6b5212168af58a40adbb2bd8df08f55bfb2f76d8f7858105457e7384276c
SHA512
5eb2a2045d0215f0f4c15505638b046e84db1a497e0c77e022938945b5f20ef238a50084b1ebcbe02c2425f7d8983650269f2729c6b5d41de12875539764c4f2
SSDEEP
3072:X8zDSsUCXfZW+vrUrUqQwY7rmqQMMkg9gWprFa:mDSsjU+vvqQ/bw6srF
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
__WSAFDIsSet
select
ntohs
inet_ntoa
recvfrom
sendto
WSACleanup
closesocket
shutdown
WSAStartup
inet_addr
socket
htons
WinHttpReceiveResponse
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpConnect
WinHttpQueryDataAvailable
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
SetServiceStatus
RegisterServiceCtrlHandlerW
RegCloseKey
GetConsoleCP
HeapReAlloc
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetConsoleMode
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
LCMapStringW
SetFilePointerEx
FlushFileBuffers
DecodePointer
WriteConsoleW
GetOEMCP
ResetEvent
GetCurrentProcess
GetComputerNameExW
GetModuleHandleA
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
GetTickCount
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DeleteCriticalSection
GetShortPathNameA
ReadFile
WriteFile
CreateFileW
GetSystemWindowsDirectoryA
MultiByteToWideChar
GetTempPathA
CreateFileA
TerminateThread
DeleteFileA
DeleteFileW
CreateProcessW
GetTempFileNameA
GetSystemWindowsDirectoryW
WaitForSingleObjectEx
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
InterlockedFlushSList
SetLastError
RtlUnwind
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ