PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
0e71e4601e1e1c48d7f7a7b75a533bea70e71b59c8df38b6f16c2ca1d64b0e89.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0e71e4601e1e1c48d7f7a7b75a533bea70e71b59c8df38b6f16c2ca1d64b0e89.dll
Resource
win10v2004-20240802-en
Target
0e71e4601e1e1c48d7f7a7b75a533bea70e71b59c8df38b6f16c2ca1d64b0e89
Size
3.5MB
MD5
fe9d9d0da623edb585617df0d0c8abf4
SHA1
1e47a4a18f2cfea332b3ab24ab12965d8c6c7623
SHA256
0e71e4601e1e1c48d7f7a7b75a533bea70e71b59c8df38b6f16c2ca1d64b0e89
SHA512
41800ec1ed9dbc30cec8e14d80b0cc26693b55bb1c0341c968e8dc2eac1df084bc51d438d70b23e826715ffd73204e9bb02fa2bad3bbad3aa1411ca15e98ea6d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zi:8QKotcTlBk9YwzEhPbYzjmMtccXk8KG
Checks for missing Authenticode signature.
resource |
---|
0e71e4601e1e1c48d7f7a7b75a533bea70e71b59c8df38b6f16c2ca1d64b0e89 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ