DllRegisterServer
DllUnregisterServer
ServiceMain
SvchostPushServiceGlobals
WUServiceMain
_crt_debugger_hook
Static task
static1
Behavioral task
behavioral1
Sample
6262b83425e85d203b4708dc629987ffaa4dff8ab03042e1332b8910b5e75a85.dll
Resource
win7-20230621-en
Behavioral task
behavioral2
Sample
6262b83425e85d203b4708dc629987ffaa4dff8ab03042e1332b8910b5e75a85.dll
Resource
win10v2004-20230703-en
Target
6262b83425e85d203b4708dc629987ffaa4dff8ab03042e1332b8910b5e75a85
Size
130KB
MD5
59cb505d1636119f2881caa14bf42326
SHA1
b20e69127f2ca0ae4852c379dcd65348f01d1cc7
SHA256
6262b83425e85d203b4708dc629987ffaa4dff8ab03042e1332b8910b5e75a85
SHA512
90667a78df7946ac6b9c90175402d699b1d61bb0b6d30d565b0f7fcc326bd2fc50dcb2a8b304fdf44cb33818c82c779caa23814258c312af596947b576cd5fa3
SSDEEP
3072:C3nCOoM+XU9MCgDFulDgWh3SaHsWZndZt9wxdTXV/:0COP+XU9MCgDFuRgWnHsWyX
Checks for missing Authenticode signature.
resource |
---|
6262b83425e85d203b4708dc629987ffaa4dff8ab03042e1332b8910b5e75a85 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
TerminateThread
CreateEventA
OpenEventA
ExitProcess
MoveFileExA
MoveFileExW
GetSystemDirectoryA
CopyFileA
GetModuleFileNameW
SetEvent
GetDriveTypeW
SetFileAttributesW
GetWindowsDirectoryW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetFileTime
SystemTimeToFileTime
GetPrivateProfileIntA
GetSystemTime
GetCurrentThread
GetCurrentThreadId
CreateThread
ExitThread
Sleep
GetTickCount
WaitForSingleObject
GetTempPathW
GetComputerNameA
ExpandEnvironmentStringsW
GetSystemInfo
GlobalFree
LoadLibraryExA
GetPrivateProfileStringA
GetVersionExA
OutputDebugStringA
CreateMutexA
OpenMutexA
SetLastError
GetFileAttributesA
FormatMessageW
FormatMessageA
SetErrorMode
CreateFileA
GetDiskFreeSpaceExA
GetFileTime
GetFileSizeEx
CreateFileW
GetDriveTypeA
SetFilePointer
LocalFree
DeleteFileW
CloseHandle
DuplicateHandle
DeleteCriticalSection
FindNextFileW
GetModuleHandleA
CreatePipe
RemoveDirectoryW
LocalAlloc
ProcessIdToSessionId
LoadLibraryA
FindClose
GetProcessVersion
EnterCriticalSection
MoveFileW
GetProcAddress
GetLastError
MultiByteToWideChar
FindFirstFileW
ReadFile
FileTimeToSystemTime
TerminateProcess
GetFileAttributesW
LeaveCriticalSection
CopyFileW
LoadLibraryW
WideCharToMultiByte
OpenProcess
InitializeCriticalSection
WriteFile
CreateDirectoryW
GetCurrentProcess
CreateProcessW
FreeLibrary
PeekNamedPipe
DisableThreadLibraryCalls
OpenWindowStationA
ExitWindowsEx
GetDesktopWindow
SetThreadDesktop
CloseWindowStation
GetDC
CloseDesktop
GetThreadDesktop
GetWindowDC
GetWindowRect
SetProcessWindowStation
OpenInputDesktop
GetProcessWindowStation
GetSystemMetrics
GetMessageA
ReleaseDC
GetDIBits
DeleteObject
SelectObject
CreateCompatibleDC
StretchBlt
RealizePalette
SelectPalette
GetObjectA
GetStockObject
CreateCompatibleBitmap
DeleteDC
CryptAcquireContextA
ImpersonateLoggedOnUser
RegCreateKeyA
RegOpenKeyW
RegSetValueExA
CryptHashData
LsaFreeMemory
ConvertSidToStringSidW
LsaRetrievePrivateData
CryptDestroyHash
RegEnumValueA
CryptCreateHash
CredEnumerateW
LsaClose
RegOpenKeyExA
RegEnumKeyExA
CredFree
CryptReleaseContext
RegQueryValueExA
LsaOpenPolicy
OpenThreadToken
CryptGetHashParam
RegSetValueExW
ControlService
RegOpenKeyExW
RegEnumValueW
OpenSCManagerA
EnumServicesStatusW
RegDeleteValueW
RegQueryInfoKeyA
StartServiceW
OpenServiceW
EnumServicesStatusA
DeleteService
CloseServiceHandle
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegCreateKeyExW
AdjustTokenPrivileges
GetUserNameA
LookupAccountSidW
LookupPrivilegeValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupAccountSidA
GetTokenInformation
CloseEventLog
OpenEventLogA
ClearEventLogA
DuplicateTokenEx
CreateProcessAsUserW
OpenProcessToken
RegOpenKeyA
RevertToSelf
SHFileOperationW
CommandLineToArgvW
CoUninitialize
CoCreateInstance
CoInitialize
ZwQuerySystemInformation
select
WSAGetLastError
connect
shutdown
ioctlsocket
htons
htonl
setsockopt
recv
bind
socket
WSAStartup
getpeername
ntohs
getsockname
closesocket
send
listen
inet_addr
inet_ntoa
gethostbyname
accept
PathCanonicalizeW
SHDeleteKeyA
SHDeleteKeyW
GetAdaptersInfo
GetModuleFileNameExW
InternetQueryOptionA
URLDownloadToCacheFileA
CryptUnprotectData
LoadUserProfileA
GetUserProfileDirectoryA
UnloadUserProfile
RasEnumEntriesW
RasGetEntryDialParamsW
wcscat
memmove
_wtoi
_snwprintf
strlen
wcsncpy
_wfopen
wcsncat
fgetws
wcslen
wcsrchr
_vsnwprintf
_purecall
??3@YAXPAX@Z
toupper
wcscpy
fclose
malloc
??2@YAPAXI@Z
sprintf
strcpy
wcsstr
realloc
wcscmp
isspace
strncpy
rand
_vsnprintf
wcstombs
_snprintf
strncmp
strstr
atoi
strcmp
wcschr
strncat
??_U@YAPAXI@Z
_wcsnicmp
isprint
strrchr
_wtof
strchr
isalnum
fopen
??_V@YAXPAX@Z
fread
srand
_time64
_wcsicmp
_wcsupr
_stricmp
_strnicmp
_CxxThrowException
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_except_handler3
free
memcpy
strcat
_ftol
memset
__CxxFrameHandler
GetErrorInfo
DllRegisterServer
DllUnregisterServer
ServiceMain
SvchostPushServiceGlobals
WUServiceMain
_crt_debugger_hook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ