ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
f10a22f1c9b4b351480912589087e8177ed3721c408acf870fc16c189442285a.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f10a22f1c9b4b351480912589087e8177ed3721c408acf870fc16c189442285a.dll
Resource
win10v2004-20220812-en
Target
f10a22f1c9b4b351480912589087e8177ed3721c408acf870fc16c189442285a
Size
24KB
MD5
cb71404b3eb99443c4048ae60dc4faf6
SHA1
685e3d391e283a0bc95f7d98b502c8854617449d
SHA256
f10a22f1c9b4b351480912589087e8177ed3721c408acf870fc16c189442285a
SHA512
ab44ffaf842d7e8b40f4f5ac3c0cd72747758e809928207565e2e4fc80be30eac0cc9a26d3fa3a096c3ad658f2108c3364858d46396323adaae5b2063ec8e02c
SSDEEP
384:avDlcrHUp3f0OIJDrjjkng4jLnaCCbdMSiUrlobVVWJC+iWiy84Q:+QHUp3f0OMfjjkv4dM7V+O3
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NtAlpcCreatePort
AlpcMaxAllowedMessageLength
NtAlpcAcceptConnectPort
AlpcInitializeMessageAttribute
NtWaitForSingleObject
RtlCreateHeap
NtAlpcOpenSenderProcess
RtlExitUserThread
NtAlpcCancelMessage
RtlAllocateAndInitializeSid
RtlCreateUserThread
NtCreateEvent
NtQuerySystemInformation
NtDelayExecution
NtResetEvent
NtWaitForMultipleObjects
NtTerminateThread
RtlUnwind
RtlLengthSid
RtlFreeSid
RtlCreateSecurityDescriptor
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
NtOpenKey
NtClose
RtlDestroyHeap
_vsnprintf
NtResumeThread
NtAlpcSendWaitReceivePort
memset
RtlInitUnicodeString
NtApphelpCacheControl
NtQueryValueKey
memcpy
RtlFreeHeap
RtlAllocateHeap
RtlInitializeCriticalSectionAndSpinCount
RtlDeleteCriticalSection
NtSetEvent
RtlEnterCriticalSection
AlpcGetMessageAttribute
RtlLeaveCriticalSection
SetServiceStatus
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegisterServiceCtrlHandlerExW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcessId
TerminateProcess
CreateFileW
InterlockedCompareExchange64
GetSystemInfo
UnregisterWait
OutputDebugStringA
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
ApphelpCheckRunApp
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ