ServiceMain
SvchostPushServiceGlobals
TestCheckStatus
TestRunning
Static task
static1
Behavioral task
behavioral1
Sample
13faa74106deb3655e5918f898951bdb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
13faa74106deb3655e5918f898951bdb.dll
Resource
win10v2004-20231215-en
Target
13faa74106deb3655e5918f898951bdb
Size
17KB
MD5
13faa74106deb3655e5918f898951bdb
SHA1
1c61f2542428b7c9dc5a0fef63605e57a93305de
SHA256
99fbadb11267a7e25d1f6add4b5f9ab00a331e815fd87e45bfb5e3af157f7ecf
SHA512
c5b5c4137d2bf84328bfea7a8d9acbd417a92dd2ae8221def5b071768e79333de773c920628d26a0ad227a7f3ac47fc50430c09f1537eb5c39cac77d4725b5cf
SSDEEP
384:4uu9O83+ZSsUdEmvtJnIVwv69186GupgACFi1Xd:DmwSsUdEmvtJnIVwv686GupgACo1Xd
Checks for missing Authenticode signature.
resource |
---|
13faa74106deb3655e5918f898951bdb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ConnectNamedPipe
CreateNamedPipeA
GetCurrentProcess
GetStartupInfoA
GetSystemDirectoryA
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
Sleep
CreateThread
DisconnectNamedPipe
SetEvent
TerminateThread
WaitForSingleObject
CreateEventA
FreeConsole
DisableThreadLibraryCalls
GetModuleFileNameA
GetProcAddress
LoadLibraryA
FreeLibrary
ReadFile
GetTempPathA
CreateFileA
WriteFile
CloseHandle
CreateMutexA
DeleteFileA
SetServiceStatus
CreateProcessAsUserA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegisterServiceCtrlHandlerA
URLDownloadToFileA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
wcstombs
_adjust_fdiv
malloc
_initterm
free
strrchr
sprintf
strncmp
_stricmp
strncpy
ServiceMain
SvchostPushServiceGlobals
TestCheckStatus
TestRunning
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ