PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
31460eee70b9e003ab6179f80e58baf0N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
31460eee70b9e003ab6179f80e58baf0N.dll
Resource
win10v2004-20240802-en
Target
31460eee70b9e003ab6179f80e58baf0N.exe
Size
3.5MB
MD5
31460eee70b9e003ab6179f80e58baf0
SHA1
e151bbfbef2d1438f0573f33a9e616b12431996e
SHA256
cbed8668950f1dad8946e35f04c84cf1d7080332b146f2aae20fec2376cec3b9
SHA512
45b3ef0d0ba0fae76d76993090873793991e0d5efbdb86b53179c946faa6ee70e198310b2eb845b5e5c907616e32845abd03056bcfd3e2833db85cba0c3b77da
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+z6:8QKotcTlBk9YwzEhPbYzjmMtccXk8K+
Checks for missing Authenticode signature.
resource |
---|
31460eee70b9e003ab6179f80e58baf0N.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ