PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ae1e41b3d2a3f37f36d433f73dd37290N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ae1e41b3d2a3f37f36d433f73dd37290N.dll
Resource
win10v2004-20240802-en
Target
ae1e41b3d2a3f37f36d433f73dd37290N.exe
Size
3.5MB
MD5
ae1e41b3d2a3f37f36d433f73dd37290
SHA1
ac007bedc363ce62e1547f042cf34746dd3ca1d4
SHA256
48c9e7f124da622ca46471f72a1550f2641a1123cc8beb8a805efbb9c8f81163
SHA512
eff25e3783dd09fbdfe0275455690eaefd2a202807302f0460aaaf7ee415cff85e1f1b20534106e453bc42148b551c85545cd8e0bd232cce3f98958c8ec152ef
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zI:8QKotcTlBk9YwzEhPbYzjmMtccXk8KM
Checks for missing Authenticode signature.
resource |
---|
ae1e41b3d2a3f37f36d433f73dd37290N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ