PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
4f310759cf2862267debfb5b043674bac22d0b33695e0b6fccbd2f6517ece604.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4f310759cf2862267debfb5b043674bac22d0b33695e0b6fccbd2f6517ece604.dll
Resource
win10v2004-20240802-en
Target
4f310759cf2862267debfb5b043674bac22d0b33695e0b6fccbd2f6517ece604
Size
3.5MB
MD5
819cdd4d59f56ba17cb4869e23dd5480
SHA1
5eb1aab4ccb6331452bb8fafe46a05090d7b9c43
SHA256
4f310759cf2862267debfb5b043674bac22d0b33695e0b6fccbd2f6517ece604
SHA512
691e879b639a0066e7f11988ae75359ee94f2e5245c428b244ada70d670df37b15f4921b49f2207917d5cae396138a1021cc178039f46946e79fa372d0d3f635
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zC:8QKotcTlBk9YwzEhPbYzjmMtccXk8K2
Checks for missing Authenticode signature.
resource |
---|
4f310759cf2862267debfb5b043674bac22d0b33695e0b6fccbd2f6517ece604 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ