PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
f93ef88c53d82d516ba47a49b9223220N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f93ef88c53d82d516ba47a49b9223220N.dll
Resource
win10v2004-20240802-en
Target
f93ef88c53d82d516ba47a49b9223220N.exe
Size
3.5MB
MD5
f93ef88c53d82d516ba47a49b9223220
SHA1
cecda99791ca93d486f5b43bd6d98950f506392a
SHA256
e9ac2f1e01741c6fce706b6cbf211ed8139541f1820ae2791a767ab715707660
SHA512
89ba6760f45581f9b8cce13b4618658e144ec78697bb4344704b3a68a5bb66e6f8f5af0e8abbdbd887ed7bd5968d3c8d58c45c7d4471a0463cbad57709bdd872
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zk:8QKotcTlBk9YwzEhPbYzjmMtccXk8KA
Checks for missing Authenticode signature.
resource |
---|
f93ef88c53d82d516ba47a49b9223220N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ