PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
a058ef58b43174c8510734cb2d163530N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a058ef58b43174c8510734cb2d163530N.dll
Resource
win10v2004-20240802-en
Target
a058ef58b43174c8510734cb2d163530N.exe
Size
4.6MB
MD5
a058ef58b43174c8510734cb2d163530
SHA1
9b8e67fe00d273fbd4db08100763a061138480d3
SHA256
04af82edd1148926dce9e428b3e15f0582bfa7b9ec574a9bfa3a903cb62b044b
SHA512
54ab68bfb0ae071eaeab3873e6ffe410cda914724da32465025e354a45036fdb807f9ecbfb4af080b7a3c7451f26b166deb617b3afdb00a62b2a2dae9f061e6b
SSDEEP
98304:8QKotcTlBk9YwzEhPbYzjmMtccXk8KMXTz9xehCtD3/wRMi9vzYW0:8QKQGG9KPUnmMtccXf/X/9XNoz9bb0
Checks for missing Authenticode signature.
resource |
---|
a058ef58b43174c8510734cb2d163530N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ