PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ca380095d8e6a3c6f0834333a65ba226223d82d8a272b57fce43a60c78bd3f0e.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ca380095d8e6a3c6f0834333a65ba226223d82d8a272b57fce43a60c78bd3f0e.dll
Resource
win10v2004-20240802-en
Target
ca380095d8e6a3c6f0834333a65ba226223d82d8a272b57fce43a60c78bd3f0e
Size
3.5MB
MD5
c4ce7f4fc1e79ade0165192748893bd6
SHA1
e6ceebcfba0b08f50b54f1ec80c9952ca113e4f8
SHA256
ca380095d8e6a3c6f0834333a65ba226223d82d8a272b57fce43a60c78bd3f0e
SHA512
f0515e2b3678c3a8599d8db5e0eee99a9428ea077f2e4403485d3db67e8a0f1c652345c28f057938a82163866344b048d12a3c2193a4914f2b13f7513b9c3df7
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zU:8QKotcTlBk9YwzEhPbYzjmMtccXk8K4
Checks for missing Authenticode signature.
resource |
---|
ca380095d8e6a3c6f0834333a65ba226223d82d8a272b57fce43a60c78bd3f0e |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ