ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
d9601412a56248878ac6a241ad8f767c9b77be48c2ff1dd770be28383e1f3b4e.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d9601412a56248878ac6a241ad8f767c9b77be48c2ff1dd770be28383e1f3b4e.dll
Resource
win10v2004-20220812-en
Target
d9601412a56248878ac6a241ad8f767c9b77be48c2ff1dd770be28383e1f3b4e
Size
25KB
MD5
1b3d8663f3e1ec04fc25aae8a6b25161
SHA1
ccbf0a2cd8ff46492dbbf9d25679cc21b0918d8a
SHA256
d9601412a56248878ac6a241ad8f767c9b77be48c2ff1dd770be28383e1f3b4e
SHA512
66953067ba54a133ba3032f32305adea306150de8716521f38e3bc970494f1b683c877569c6a1b2af1999f762dae2d1568a2922522194776cc3ab54d28e847da
SSDEEP
384:avDlcrHUp3f0OIJDrjjkng4jLnaCCbdMSiUrlobVVWJC+iWiy844:+QHUp3f0OMfjjkv4dM7V+Ot
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NtAlpcCreatePort
AlpcMaxAllowedMessageLength
NtAlpcAcceptConnectPort
AlpcInitializeMessageAttribute
NtWaitForSingleObject
RtlCreateHeap
NtAlpcOpenSenderProcess
RtlExitUserThread
NtAlpcCancelMessage
RtlAllocateAndInitializeSid
RtlCreateUserThread
NtCreateEvent
NtQuerySystemInformation
NtDelayExecution
NtResetEvent
NtWaitForMultipleObjects
NtTerminateThread
RtlUnwind
RtlLengthSid
RtlFreeSid
RtlCreateSecurityDescriptor
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
NtOpenKey
NtClose
RtlDestroyHeap
_vsnprintf
NtResumeThread
NtAlpcSendWaitReceivePort
memset
RtlInitUnicodeString
NtApphelpCacheControl
NtQueryValueKey
memcpy
RtlFreeHeap
RtlAllocateHeap
RtlInitializeCriticalSectionAndSpinCount
RtlDeleteCriticalSection
NtSetEvent
RtlEnterCriticalSection
AlpcGetMessageAttribute
RtlLeaveCriticalSection
SetServiceStatus
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegisterServiceCtrlHandlerExW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcessId
TerminateProcess
CreateFileW
InterlockedCompareExchange64
GetSystemInfo
UnregisterWait
OutputDebugStringA
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
ApphelpCheckRunApp
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ