PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bf853096cbd0fd44366c28f825e8b6db2cefe4688062ac11707964415f9757f1.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf853096cbd0fd44366c28f825e8b6db2cefe4688062ac11707964415f9757f1.dll
Resource
win10v2004-20240802-en
Target
bf853096cbd0fd44366c28f825e8b6db2cefe4688062ac11707964415f9757f1
Size
3.5MB
MD5
df3c256e17461928bec8409035db02e2
SHA1
546361a1277009cda6eb3e94cf59443ec056ce7f
SHA256
bf853096cbd0fd44366c28f825e8b6db2cefe4688062ac11707964415f9757f1
SHA512
b93cf5b0298dffb43c27d4dd7a099d302ae1f20441898f2d7f3187c6796a89f62889e6d082e4e93ec8c75596d8911b28973c8bcd22af00eb54b9f5928a39ea70
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zW:8QKotcTlBk9YwzEhPbYzjmMtccXk8Ka
Checks for missing Authenticode signature.
resource |
---|
bf853096cbd0fd44366c28f825e8b6db2cefe4688062ac11707964415f9757f1 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ