ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
c11da0e25dfa98fb4640738ebfe12982f9e156a25b83fa075cf9fed61a524a22.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c11da0e25dfa98fb4640738ebfe12982f9e156a25b83fa075cf9fed61a524a22.dll
Resource
win10v2004-20221111-en
Target
c11da0e25dfa98fb4640738ebfe12982f9e156a25b83fa075cf9fed61a524a22
Size
24KB
MD5
e55c59b3ca88e84496b0a9883a9800ff
SHA1
3b643bdafb9aa467176f0807712dd6d13a450da2
SHA256
c11da0e25dfa98fb4640738ebfe12982f9e156a25b83fa075cf9fed61a524a22
SHA512
8217638e271c89c9ec0857661c69c305a283a62bfdf9e34c2ae7bb90670da5eaaa242e44ee64987953489da7be8093b0cd2cc39717ea1e0764e46cfac13c8800
SSDEEP
384:avDlcrHUp3f0OIJDrjjkng4jLnaCCbdMSiUrlobVVWJC+iWiy84y:+QHUp3f0OMfjjkv4dM7V+OJ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NtAlpcCreatePort
AlpcMaxAllowedMessageLength
NtAlpcAcceptConnectPort
AlpcInitializeMessageAttribute
NtWaitForSingleObject
RtlCreateHeap
NtAlpcOpenSenderProcess
RtlExitUserThread
NtAlpcCancelMessage
RtlAllocateAndInitializeSid
RtlCreateUserThread
NtCreateEvent
NtQuerySystemInformation
NtDelayExecution
NtResetEvent
NtWaitForMultipleObjects
NtTerminateThread
RtlUnwind
RtlLengthSid
RtlFreeSid
RtlCreateSecurityDescriptor
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
NtOpenKey
NtClose
RtlDestroyHeap
_vsnprintf
NtResumeThread
NtAlpcSendWaitReceivePort
memset
RtlInitUnicodeString
NtApphelpCacheControl
NtQueryValueKey
memcpy
RtlFreeHeap
RtlAllocateHeap
RtlInitializeCriticalSectionAndSpinCount
RtlDeleteCriticalSection
NtSetEvent
RtlEnterCriticalSection
AlpcGetMessageAttribute
RtlLeaveCriticalSection
SetServiceStatus
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegisterServiceCtrlHandlerExW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcessId
TerminateProcess
CreateFileW
InterlockedCompareExchange64
GetSystemInfo
UnregisterWait
OutputDebugStringA
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
ApphelpCheckRunApp
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ