ServiceMain
SvchostPushServiceGlobals
Static task
static1
Behavioral task
behavioral1
Sample
11a2b45f64500c9616f1795b23b74f14.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
11a2b45f64500c9616f1795b23b74f14.dll
Resource
win10v2004-20231222-en
Target
11a2b45f64500c9616f1795b23b74f14
Size
24KB
MD5
11a2b45f64500c9616f1795b23b74f14
SHA1
27cc37ebe5bb84ae2916e4e22fd480fa9bc860b7
SHA256
eeab47c0b9400befe9e64ea220aaa760f5bdb232fbcc17afed159e65c58ebab6
SHA512
cc8674c17decb7d9774a48e25a2c9dabeda033c34942ea6ca77c1617cd1b9e346d9f77fd3d63f9cd3c425766be6ccfcb80c51e0f103b3921e94f0eedf9f6c4cd
SSDEEP
384:avDlcrHUp3f0OIJDrjjkng4jLnaCCbdMSiUrlobVVWJC+iWiy84Y:+QHUp3f0OMfjjkv4dM7V+OP
Checks for missing Authenticode signature.
resource |
---|
11a2b45f64500c9616f1795b23b74f14 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
NtAlpcCreatePort
AlpcMaxAllowedMessageLength
NtAlpcAcceptConnectPort
AlpcInitializeMessageAttribute
NtWaitForSingleObject
RtlCreateHeap
NtAlpcOpenSenderProcess
RtlExitUserThread
NtAlpcCancelMessage
RtlAllocateAndInitializeSid
RtlCreateUserThread
NtCreateEvent
NtQuerySystemInformation
NtDelayExecution
NtResetEvent
NtWaitForMultipleObjects
NtTerminateThread
RtlUnwind
RtlLengthSid
RtlFreeSid
RtlCreateSecurityDescriptor
RtlCreateAcl
RtlAddAccessAllowedAce
RtlSetDaclSecurityDescriptor
NtOpenKey
NtClose
RtlDestroyHeap
_vsnprintf
NtResumeThread
NtAlpcSendWaitReceivePort
memset
RtlInitUnicodeString
NtApphelpCacheControl
NtQueryValueKey
memcpy
RtlFreeHeap
RtlAllocateHeap
RtlInitializeCriticalSectionAndSpinCount
RtlDeleteCriticalSection
NtSetEvent
RtlEnterCriticalSection
AlpcGetMessageAttribute
RtlLeaveCriticalSection
SetServiceStatus
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegisterServiceCtrlHandlerExW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcessId
TerminateProcess
CreateFileW
InterlockedCompareExchange64
GetSystemInfo
UnregisterWait
OutputDebugStringA
GetLastError
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcessId
ApphelpCheckRunApp
ServiceMain
SvchostPushServiceGlobals
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ