ServiceMain
SvchostPushServiceGlobals
decra
Static task
static1
Behavioral task
behavioral1
Sample
3fa7f133c8b32854344823435867a411.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3fa7f133c8b32854344823435867a411.dll
Resource
win10v2004-20231215-en
Target
3fa7f133c8b32854344823435867a411
Size
138KB
MD5
3fa7f133c8b32854344823435867a411
SHA1
c9cadabac81e647e4afc7ca627978dc56eca9b5a
SHA256
13c85a085f09ca214f356433aa1a09badbb607f37c8e9a42e8cf7bfda9666569
SHA512
990f46299838ff89e6004ab9cb21c116e721d3f5d12c96eb57d3cf94aad41af15b5735c163a181466ef63c0f41dc3e38dc530861f98053d38896ae221b47acda
SSDEEP
3072:Syne4kjMlBYj6lLeD9LuLQKwj4UQbcb8cRm2l:SylXfYjeSxLu4R
Checks for missing Authenticode signature.
resource |
---|
3fa7f133c8b32854344823435867a411 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
CreateFileW
GetFileSize
ReadFile
SetLastError
CloseHandle
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
ReadProcessMemory
WriteProcessMemory
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
LoadResource
LoadLibraryA
LoadLibraryW
FindResourceW
MultiByteToWideChar
CreateToolhelp32Snapshot
Thread32First
Thread32Next
WriteConsoleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
WideCharToMultiByte
ExitProcess
GetModuleFileNameA
GetStringTypeW
GetACP
HeapAlloc
HeapFree
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
wsprintfA
ServiceMain
SvchostPushServiceGlobals
decra
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ