PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
8556ae90642813eb99c6fc6c8efee74454d84e00dd65532cd58cdb41365106ca.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8556ae90642813eb99c6fc6c8efee74454d84e00dd65532cd58cdb41365106ca.dll
Resource
win10v2004-20240802-en
Target
8556ae90642813eb99c6fc6c8efee74454d84e00dd65532cd58cdb41365106ca
Size
4.5MB
MD5
1aaeb75a24f27393c228076557adfd8b
SHA1
5b3e32ed4007b7fd82501bde8fe6620ac8b8c878
SHA256
8556ae90642813eb99c6fc6c8efee74454d84e00dd65532cd58cdb41365106ca
SHA512
389f8503ef294eee58fa262ebb8543d3c5c62b4eee25d8636ed67d1bd10e563c3fbdace786f9dcc8a8b5acfd738a89177ac135749d03520b1a25eb9db5cba282
SSDEEP
98304:GqQHp5qEGiFp2i8Qe7KoO/TrXZ/llWnX4wzXhJjemq+TWh7tHOk/:Gpp5qDiFAUBlyX4wThs71
Checks for missing Authenticode signature.
resource |
---|
8556ae90642813eb99c6fc6c8efee74454d84e00dd65532cd58cdb41365106ca |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ