PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
5f28ee3b8e1d5906a1fad9d045fc47f0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5f28ee3b8e1d5906a1fad9d045fc47f0N.dll
Resource
win10v2004-20240802-en
Target
5f28ee3b8e1d5906a1fad9d045fc47f0N.exe
Size
3.5MB
MD5
5f28ee3b8e1d5906a1fad9d045fc47f0
SHA1
22d7924a9cc936467547673403eada10fdd72867
SHA256
fdeebcf995e2085a87332bd8f17e91c96faaa4ae8c144810b6752a437a7e04c6
SHA512
199c50070f07e57b8b3cdd0041428e0976df2869357acd7167d9c45007b6b5a8fe203d25073abcaccbc1722a8027d659436f404aafbc244056ca56d20f3abc33
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+za:8QKotcTlBk9YwzEhPbYzjmMtccXk8K2
Checks for missing Authenticode signature.
resource |
---|
5f28ee3b8e1d5906a1fad9d045fc47f0N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ