PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6d9295f27a5677bafa70730e9cc7b696722781da12394ff92f814711f80eb2de.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6d9295f27a5677bafa70730e9cc7b696722781da12394ff92f814711f80eb2de.dll
Resource
win10v2004-20240802-en
Target
6d9295f27a5677bafa70730e9cc7b696722781da12394ff92f814711f80eb2de
Size
3.5MB
MD5
4029fccbe2aa70d114e85cff4e27a5f8
SHA1
8d92858a011f8cec3d80fd15669576d0d161014d
SHA256
6d9295f27a5677bafa70730e9cc7b696722781da12394ff92f814711f80eb2de
SHA512
3b27ed5a1cd3c04a3c56528c84b1ca80fab316017a45108d94bf4aac2ed19dd1783f7d73b8b7860fcb707aea458fc2a92e472d72ccc91fb2ed234fcb7eb5f0cb
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zX:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kj
Checks for missing Authenticode signature.
resource |
---|
6d9295f27a5677bafa70730e9cc7b696722781da12394ff92f814711f80eb2de |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ