ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
dcsvc.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
dcsvc.dll
Resource
win10v2004-20230220-en
Target
dcsvc.dll
Size
769KB
MD5
5b319fce98700d01dcdcb0bc80c93ded
SHA1
18484ce0907df513025eccd831ca8ff86d5da3fa
SHA256
d80e347b83f72bc09ac649036897830dd72a842e260871701d512c1dd045af59
SHA512
7b2e61abc4efadca5b0a7977b9cd5121896e14ed55c8f1779c1dd9660669663213ac30bbef6a0eb4bddeefc013ae9ee25a7b0ad4c325b19a7793f7477cb67744
SSDEEP
12288:Gd/VBxrgigV7OndxwxC9323JFVVwUJe0v1ZaDZb1uV0Z:a/VBx87OndxQc21VdnHalb1u6Z
Checks for missing Authenticode signature.
resource |
---|
dcsvc.dll |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
?_Add_vtordisp1@?$basic_istream@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Add_vtordisp2@?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?_BADOFF@std@@3_JB
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Orphan_all@_Container_base0@std@@QEAAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAPEBDH@Z
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?_Syserror_map@std@@YAPEBDH@Z
swprintf_s
_fpclass
wcstol
towlower
_wcslwr
wcsstr
_wcsnicmp
ldiv
wcsncmp
memmove_s
??_V@YAXPEAX@Z
_CxxThrowException
__RTDynamicCast
memcmp
memcpy
memmove
_onexit
__dllonexit
_unlock
_lock
?terminate@@YAXXZ
??1type_info@@UEAA@XZ
_initterm
free
_amsg_exit
_XcptFilter
_callnewh
malloc
_purecall
_wcsicmp
_vsnprintf_s
memcpy_s
sprintf_s
_vsnwprintf
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
__CxxFrameHandler3
??3@YAXPEAX@Z
__C_specific_handler
wcschr
memset
RtlIsStateSeparationEnabled
RtlNtStatusToDosError
RtlPublishWnfStateData
RtlGetDeviceFamilyInfoEnum
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
FormatMessageW
TerminateProcess
GetCurrentProcess
GetCurrentProcessId
TerminateThread
GetCurrentThreadId
CreateThread
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
FindStringOrdinal
GetModuleHandleW
LoadLibraryExW
DebugBreak
IsDebuggerPresent
OutputDebugStringW
SetUnhandledExceptionFilter
SetLastError
GetLastError
UnhandledExceptionFilter
CreateMutexExW
CreateMutexW
LeaveCriticalSection
CreateEventW
ReleaseSemaphore
ReleaseMutex
CreateSemaphoreExW
InitializeCriticalSection
ReleaseSRWLockShared
InitializeCriticalSectionEx
OpenEventW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
AcquireSRWLockShared
WaitForSingleObjectEx
SetEvent
WaitForSingleObject
DeleteCriticalSection
OpenSemaphoreW
DuplicateHandle
CloseHandle
RegQueryValueExW
RegSetValueExW
RegDeleteTreeW
RegEnumKeyExW
RegCreateKeyExW
RegOpenCurrentUser
RegOpenKeyExW
RegCloseKey
RegEnumValueW
RegDeleteValueW
RegQueryInfoKeyW
RegGetValueW
EventWriteTransfer
EventUnregister
EventRegister
EventSetInformation
RegisterServiceCtrlHandlerExW
SetServiceStatus
RpcServerInterfaceGroupClose
UuidFromStringW
RpcServerInterfaceGroupCreateW
RpcServerInterfaceGroupActivate
RpcServerInterfaceGroupDeactivate
NdrServerCall2
UuidCreateSequential
RpcServerInqCallAttributesW
NdrServerCallAll
UuidCreate
RpcBindingFree
SleepConditionVariableSRW
WakeAllConditionVariable
Sleep
LocalFree
LocalAlloc
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount
GetSystemTime
GetLocalTime
GetTickCount64
UnregisterWaitEx
FreeTransientObjectSecurityDescriptor
QueryTransientObjectSecurityDescriptor
CoTaskMemAlloc
CoUninitialize
CoCreateGuid
CoInitializeEx
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
StringFromGUID2
StringFromCLSID
CLSIDFromString
RegDeleteKeyValueW
RegSetKeyValueW
ExpandEnvironmentStringsW
PathCchSkipRoot
WriteFile
ReadFile
FindClose
CreateDirectoryW
CreateFileW
FindFirstFileW
DeleteFileW
FileTimeToSystemTime
SystemTimeToFileTime
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptOpenAlgorithmProvider
MultiByteToWideChar
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
MakeSelfRelativeSD
MakeAbsoluteSD
ResolveDelayLoadedAPI
DelayLoadFailureHook
RegDeleteKeyW
RegEnumKeyW
SetEntriesInAclW
GetExplicitEntriesFromAclW
CreateXmlWriterOutputWithEncodingName
CreateXmlWriter
CreateXmlReaderInputWithEncodingName
CreateXmlReader
SHCreateStreamOnFileW
SHCopyKeyW
lstrlenA
FileTimeToISO8601String
SystemTimeToISO8601String
ord34
ord78
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ