PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
a6d468b65602e6eec2fee85ca75a3d84cefde8c87aca21a5879d17772ae855cf.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a6d468b65602e6eec2fee85ca75a3d84cefde8c87aca21a5879d17772ae855cf.dll
Resource
win10v2004-20240802-en
Target
a6d468b65602e6eec2fee85ca75a3d84cefde8c87aca21a5879d17772ae855cf
Size
4.5MB
MD5
25785d6361a3e26cc7b7e2320659a40d
SHA1
c79537dff7b86cd5f67d68a0ae4950ea5089afb8
SHA256
a6d468b65602e6eec2fee85ca75a3d84cefde8c87aca21a5879d17772ae855cf
SHA512
f267231c35e94d619185a0c36481f8f2ccbf155fd69545b2b9f897eed4ed3842735bc009bb785a2a6d102139737e8ddfe9d8b0ebd0bdacc825725b8b7cc1723f
SSDEEP
98304:GqQHp5qEGiFp2i8Qe7KoO/TrXZ/llWnX4wzXhJjemq+TWh7tHOky:Gpp5qDiFAUBlyX4wThs7c
Checks for missing Authenticode signature.
resource |
---|
a6d468b65602e6eec2fee85ca75a3d84cefde8c87aca21a5879d17772ae855cf |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ