PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f6ded42d3ab8401846b60307da5d20f8c9bc5051f8e5c8d6c2149a768b6f9fe8.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f6ded42d3ab8401846b60307da5d20f8c9bc5051f8e5c8d6c2149a768b6f9fe8.dll
Resource
win10v2004-20240802-en
Target
f6ded42d3ab8401846b60307da5d20f8c9bc5051f8e5c8d6c2149a768b6f9fe8
Size
3.5MB
MD5
a84e4c845a3c552a939bfc32bcf916d5
SHA1
1b32e7404bbe120409c681d7c30d840c9f644714
SHA256
f6ded42d3ab8401846b60307da5d20f8c9bc5051f8e5c8d6c2149a768b6f9fe8
SHA512
e8beca580da7cecf0f88538ab54b06d2aef6361cec409bcf45e8e704b24780d20ac3c20f69035994b0b35687d8d8b0f419b1fcc057a584a7a536df58019ce06d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zb:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kv
Checks for missing Authenticode signature.
resource |
---|
f6ded42d3ab8401846b60307da5d20f8c9bc5051f8e5c8d6c2149a768b6f9fe8 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ