PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
61d1b682a41db60f4fc7d891fc063f60N.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
61d1b682a41db60f4fc7d891fc063f60N.dll
Resource
win10v2004-20240802-en
Target
61d1b682a41db60f4fc7d891fc063f60N.exe
Size
4.6MB
MD5
61d1b682a41db60f4fc7d891fc063f60
SHA1
dd779a7fa0679c7e0fdd992a39898829eda0a555
SHA256
e6d6693b811758a5be580029a49b264986acd48b8091ffc9e1db0f285927e67b
SHA512
c15e488874d01e30de2ead875b4b82aa25691e8e5833d195d88d4ddcb922ecb897b9dc7bc1c3ed08626d8b78534385baafdee22d9e30881641049c99144d7c0d
SSDEEP
98304:8QKotcTlBk9YwzEhPbYzjmMtccXk8KMXTz9xehCtD3/wRMi9vzYWP:8QKQGG9KPUnmMtccXf/X/9XNoz9bbP
Checks for missing Authenticode signature.
resource |
---|
61d1b682a41db60f4fc7d891fc063f60N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ