PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
bd02024412030d148559ef800e0b42544343c12e95f25b9dcb1c106ab119ea3c.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bd02024412030d148559ef800e0b42544343c12e95f25b9dcb1c106ab119ea3c.dll
Resource
win10v2004-20240802-en
Target
bd02024412030d148559ef800e0b42544343c12e95f25b9dcb1c106ab119ea3c
Size
3.5MB
MD5
ecf7a11d706f00bc74c49cd4ab9fd432
SHA1
ed8fb7f733709b33e104e1f3e422da4a3d1acd7c
SHA256
bd02024412030d148559ef800e0b42544343c12e95f25b9dcb1c106ab119ea3c
SHA512
6b6fec870e17ee28cc6abd0439789d7517a7df1335b2e339af03dfb30f58f79f51e0f5c0d55b0ccec20a38f10f077a925540b65b9bfd16c4425700a55f9b978d
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zE:8QKotcTlBk9YwzEhPbYzjmMtccXk8KY
Checks for missing Authenticode signature.
resource |
---|
bd02024412030d148559ef800e0b42544343c12e95f25b9dcb1c106ab119ea3c |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ