PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
6d8bf45b35948d486c307f0a06991b698d5737fc3e92535798704bede5975e8c.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
6d8bf45b35948d486c307f0a06991b698d5737fc3e92535798704bede5975e8c.dll
Resource
win10v2004-20240802-en
Target
6d8bf45b35948d486c307f0a06991b698d5737fc3e92535798704bede5975e8c
Size
3.5MB
MD5
f807d241b4e03a87197cbca13bc873bf
SHA1
65bb3a879d8d844a7d8a1d7c481987d88b9bbc16
SHA256
6d8bf45b35948d486c307f0a06991b698d5737fc3e92535798704bede5975e8c
SHA512
5e6542ce1ffcb937ad0a41c54b1b3e9a2a789782e455379369bd91929b49b9d5514b22a6bcff45e22f3d0183ab04393e6d5a0710ebfaef8b1d8178d3f9a143e4
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zk:8QKotcTlBk9YwzEhPbYzjmMtccXk8KQ
Checks for missing Authenticode signature.
resource |
---|
6d8bf45b35948d486c307f0a06991b698d5737fc3e92535798704bede5975e8c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ