PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ed6d01d94cd50000a45f90eda1057870N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ed6d01d94cd50000a45f90eda1057870N.dll
Resource
win10v2004-20240802-en
Target
ed6d01d94cd50000a45f90eda1057870N.exe
Size
3.5MB
MD5
ed6d01d94cd50000a45f90eda1057870
SHA1
9988884b77758f7a30abf0c2256f235e855608e5
SHA256
f18d7f58b35543f6ab1a1860e618fcc4564422259339ca428843f5fb93491c1f
SHA512
2525d9a14e068a9113b4f742d2a5bcd0ab771d3ece84045f03b945fd00b358168a5add651ee8202cb6f74854cd22570f324e7c1d44f7ec5e66d99dd7fa56247f
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zA:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kc
Checks for missing Authenticode signature.
resource |
---|
ed6d01d94cd50000a45f90eda1057870N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ