PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f734e6ed6dc40bc7daa53d094205ac60N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f734e6ed6dc40bc7daa53d094205ac60N.dll
Resource
win10v2004-20240802-en
Target
f734e6ed6dc40bc7daa53d094205ac60N.exe
Size
3.5MB
MD5
f734e6ed6dc40bc7daa53d094205ac60
SHA1
3a35d70f378ac0ff22dea70f18e27dc750484a0e
SHA256
43ee7a6ecdf5116cf30daa13c3d4aa5d26c2a79db02798473998b0c6ba9997d4
SHA512
b41322781f0381068bf463aabf74eaeefb2eb720da36c221a63cf717bd1a1621944529c2b4ef620db74bc3d3570de18396d34698494680992aa1c7038acdf5d6
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zO:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kq
Checks for missing Authenticode signature.
resource |
---|
f734e6ed6dc40bc7daa53d094205ac60N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ