ServiceMain
SvchostPushServiceGlobals
Behavioral task
behavioral1
Sample
5e18230b399ae28f6e97422e8201a067e5e8cbba1588c9178db5c5302c0a7f02.dll
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
5e18230b399ae28f6e97422e8201a067e5e8cbba1588c9178db5c5302c0a7f02.dll
Resource
win10v2004-20220414-en
Target
5e18230b399ae28f6e97422e8201a067e5e8cbba1588c9178db5c5302c0a7f02
Size
159KB
MD5
4152449afddf8517cbb1765a0583e95a
SHA1
ea096dfdbd33906c62ffb87b4c37b9298748e927
SHA256
5e18230b399ae28f6e97422e8201a067e5e8cbba1588c9178db5c5302c0a7f02
SHA512
d4e771ab308bbc7e0c07f9b57a1b84a43b7bef048c8686f4d2882870c8c79de384f8034fa1b995d0f33d45e8712c87dbf56e1e7769920e9bf7e0e002772d3db6
SSDEEP
3072:m1octnOm24TDV+Pub1B9jJqst+L6R8GDvktjYDJaPmy:m1XNOm24Tyub1BqI+YAeoPm
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
__WSAFDIsSet
select
ntohs
inet_ntoa
recvfrom
sendto
WSACleanup
closesocket
shutdown
WSAStartup
inet_addr
socket
htons
WinHttpReceiveResponse
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpConnect
WinHttpQueryDataAvailable
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
SetServiceStatus
RegisterServiceCtrlHandlerW
RegCloseKey
HeapReAlloc
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetConsoleCP
FindNextFileA
FindFirstFileExA
FindClose
GetStringTypeW
LCMapStringW
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
WriteConsoleW
IsValidCodePage
WaitForSingleObjectEx
GetCurrentProcess
GetComputerNameExW
GetModuleHandleA
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
WideCharToMultiByte
GetTickCount
WaitForSingleObject
CreateEventW
SetEvent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DeleteCriticalSection
GetShortPathNameA
ReadFile
WriteFile
CreateFileW
GetSystemWindowsDirectoryA
MultiByteToWideChar
GetTempPathA
CreateFileA
TerminateThread
DeleteFileA
DeleteFileW
CreateProcessW
GetTempFileNameA
GetSystemWindowsDirectoryW
ResetEvent
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RtlUnwindEx
InterlockedFlushSList
SetLastError
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameA
HeapFree
HeapAlloc
GetACP
GetStdHandle
GetFileType
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ