PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
750aa1a871af356095aa4b339acdfccdea98084a48b0561367af2f052650414a.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
750aa1a871af356095aa4b339acdfccdea98084a48b0561367af2f052650414a.dll
Resource
win10v2004-20240802-en
Target
750aa1a871af356095aa4b339acdfccdea98084a48b0561367af2f052650414a
Size
4.5MB
MD5
426b6ab2541cb87dc5b715386bf3c73a
SHA1
75cd2d549fca69b97ad4a8ab8ee14fc71e5fcb02
SHA256
750aa1a871af356095aa4b339acdfccdea98084a48b0561367af2f052650414a
SHA512
9c7483e658c33ffbcbcedd4f4ce301ed7fee899a1ccc4e8df3a419b8f7b99a68d6e11fbb58d67b1d2289bcf01c52462582d084bcde1a2f8761ab9bff3d4ccd3f
SSDEEP
98304:GqQHp5qEGiFp2i8Qe7KoO/TrXZ/llWnX4wzXhJjemq+TWh7tHOke:Gpp5qDiFAUBlyX4wThs7c
Checks for missing Authenticode signature.
resource |
---|
750aa1a871af356095aa4b339acdfccdea98084a48b0561367af2f052650414a |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ