PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
e6df2d073d0d828380ee85de8ade99ca9431be6fe4ad6a12d8dd0d50883da4dc.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e6df2d073d0d828380ee85de8ade99ca9431be6fe4ad6a12d8dd0d50883da4dc.dll
Resource
win10v2004-20240802-en
Target
e6df2d073d0d828380ee85de8ade99ca9431be6fe4ad6a12d8dd0d50883da4dc
Size
3.5MB
MD5
73b657034f7663f5ea3e52a230485e86
SHA1
d6d3571a1ccabc551ca203159c6223a03a137342
SHA256
e6df2d073d0d828380ee85de8ade99ca9431be6fe4ad6a12d8dd0d50883da4dc
SHA512
a2d841bcae5a58d2601cb7749fa22d2b7ee2578fc0a09f5971520b287eff569954c6b040b6551a9d2ad06d39bcc2faae3e5d42dfdb33d5137787aaaeb8cee79d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zK:8QKotcTlBk9YwzEhPbYzjmMtccXk8KG
Checks for missing Authenticode signature.
resource |
---|
e6df2d073d0d828380ee85de8ade99ca9431be6fe4ad6a12d8dd0d50883da4dc |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ